[nsp-sec] 12k probably compromised FTP accounts

[Par Osterberg Medina]

Hi list,

Proxy ACK for ASN 1257, 1299, 3292, 3301, 6830, 8434, 12832,
35041 and 39570. Will send sanitized information to their abuse teams.

Regards
Pär Österberg Medina - Sitic, GovCERT-SE



Tom Fischer wrote:
> ----------- nsp-security Confidential --------
> 
> Hi,
> 
> attached (the first part) of a list of probably compromised 
> FTP accounts. The data is based on an iframer toolkit 
> (a toolkit which uses stolen FTP credentials to add iframes/JavaScript/...).
> 
> I've removed the ftp passwords for obvious reasons.
> The data is not verified.
> 

>