[sytse]

This is a great early detection mechanism for malware.

Providers like Crowdstrike https://www.crowdstrike.com/ already aggregate results of malware scans for customers.

This is different because it is National CSIRT of the Czech Republic and because it is a honeypot, it will let the attacker use more commands.