[nsp-sec] 12k probably compromised FTP accounts

[Matthew McGlashan]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Greetings Tom,

Ack for .au

Mind if I pass on the .nz to our collegues in New Zealand?

Best,

- -- Matthew McGlashan --
Coordination Centre Team Leader             | Hotline: +61 7 3365 4417
Australian Computer Emergency Response Team | Direct:  +61 7 3365 7924
(AusCERT)                                   | Fax:     +61 7 3365 7031
The University of Queensland                | WWW:     www.auscert.org.au
Qld 4072 Australia                          | Email: auscert at auscert.org.au

> Hi,
> 
> attached (the first part) of a list of probably compromised 
> FTP accounts. The data is based on an iframer toolkit 
> (a toolkit which uses stolen FTP credentials to add iframes/JavaScript/...).
> 
> I've removed the ftp passwords for obvious reasons.
> The data is not verified.
> 
> ASN | ip address | ftp server | login
> 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (FreeBSD)
Comment: http://www.auscert.org.au/render.html?it=1967
Comment: http://www.auscert.org.au/render.html?it=1967

iQCVAwUBR/RK8Sh9+71yA2DNAQL3WwP7B+93/xlup3LU/uyg+tnsXQh1Fde/+Jcq
xDu1yF8hjlXARplArs1OOARhvgIC0mhFDWOF0dPXH0j6wi/Z/l3SMdV9F7dtQKHt
bRYB56Lx2kjMTOVhs4gCGr72jfTAm3tv0WfXnpPkAJk8yr/Ap1E2dR/Wfne4xcT6
N80qGlmEaFA=
=qSOG
-----END PGP SIGNATURE-----