[nsp-sec] 6k probably compromised FTP accounts

Marius Urkis marius at litnet.lt
Mon Apr 7 07:51:39 EDT 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

ACK for 2847, 5479
Notified 33922, 13194, 8764, 8486

Tom Fischer wrote:
| ----------- nsp-security Confidential --------
|
| Hi,
|
| attached (the second part of) a list of probably compromised
| FTP accounts. The data is based on an iframer toolkit
| (a toolkit which uses stolen FTP credentials to add
iframes/JavaScript/...).
|
| I've removed the ftp passwords for obvious reasons.
| The data is not verified.
|
| ASN | ip address | ftp server  | login
|


- --
Marius

=============================
~ Marius Urkis
~ LITNET CERT
~ http://cert.litnet.lt
~ Tel: +370 37 300645
~ GSM: +370 687 79059
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD4DBQFH+grLHS98nbdNAJwRAs8sAJYn4AVqx11Mjxxhn2Z9Af9zes+9AJ4gQkyz
eJr90D9gkbB54uroMqL3xg==
=2qkP
-----END PGP SIGNATURE-----



More information about the nsp-security mailing list