[nsp-sec] Attn gmail -- C99 PHP shell stuff

[jose nazario]

Gmail

Is the account "doscoder at gmail.com" still active? It's turned up in a couple
of C99 PHP shells I've seen around, one I was just investigating.

To the wider community, is this a default one or could this be specific to
this attack?

Thanks.


-------------------------------------------------------------
jose nazario, ph.d.  <jose at arbor.net>
security researcher, office of the CTO
Arbor Networks
v: (734) 821 1427
PGP: 0x40A7BF94
www.arbornetworks.com
-------------------------------------------------------------