[nsp-sec] 12k probably compromised FTP accounts

John Fraizer john at op-sec.us
Wed Apr 2 13:05:47 EDT 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

ACK AS11456

Tom Fischer wrote:
> ----------- nsp-security Confidential --------
>
> Hi,
>
> attached (the first part) of a list of probably compromised
> FTP accounts. The data is based on an iframer toolkit
> (a toolkit which uses stolen FTP credentials to add
iframes/JavaScript/...).
>
> I've removed the ftp passwords for obvious reasons.
> The data is not verified.
>
> ASN | ip address | ftp server | login
> 11456 | 68.143.138.162  | www.vintage-vfi.com        |anth932
> 11456 | 68.143.138.162  | www.vintage-vfi.com        |general

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Mandriva - http://enigmail.mozdev.org

iD8DBQFH87zr+16lRpJszIgRAg8pAJ9PTW8nV3tFa9Ptfy0/tqrOQzRtSQCfbVRB
YBBuiLK3KMzUTggmFGyQ9zg=
=dxcb
-----END PGP SIGNATURE-----




More information about the nsp-security mailing list