[nsp-sec] Attn gmail -- C99 PHP shell stuff

[Peter Moody]

On Wed, Oct 15, 2008 at 14:09, jose nazario <jose at arbor.net> wrote:
> ----------- nsp-security Confidential --------
>
> Gmail
>
> Is the account "doscoder at gmail.com" still active? It's turned up in a couple
> of C99 PHP shells I've seen around, one I was just investigating.

was it showing up as a drop box or a 'contact me for my l33t coding
skillz' advertisement?


> To the wider community, is this a default one or could this be specific to
> this attack?
>
> Thanks.
>
>
> -------------------------------------------------------------
> jose nazario, ph.d.  <jose at arbor.net>
> security researcher, office of the CTO
> Arbor Networks
> v: (734) 821 1427
> PGP: 0x40A7BF94
> www.arbornetworks.com
> -------------------------------------------------------------
>
>
>
>
> _______________________________________________
> nsp-security mailing list
> nsp-security at puck.nether.net
> https://puck.nether.net/mailman/listinfo/nsp-security
>
> Please do not Forward, CC, or BCC this E-mail outside of the nsp-security
> community. Confidentiality is essential for effective Internet security counter-measures.
> _______________________________________________
>



-- 
Peter Moody      Google    1.650.253.7306
Network Security Engineer  pgp:0xC3410038