[nsp-sec] ACK AS12994, 2116, 25351, 29486, 34989, 39783, 42400, 5381 12k probably compromised FTP accounts

[Anders Hardangen]

Thanks Tom,

Ack for AS12994, AS2116, AS25351, AS29486, AS34989, AS39783, AS42400,
AS5381. Sanitized info and sent to their abuse departments.

Best regards
Anders Hardangen
NorCERT


> ----------- nsp-security Confidential --------
>
> Hi,
>
> attached (the first part) of a list of probably compromised
> FTP accounts. The data is based on an iframer toolkit
> (a toolkit which uses stolen FTP credentials to add
iframes/JavaScript/...).
>
> I've removed the ftp passwords for obvious reasons.
> The data is not verified.
>
> ASN | ip address | ftp server | login