[nsp-sec] List of compromised devices from MS08-067

Gabriel Iovino giovino at ren-isac.net
Mon Oct 27 15:12:55 EDT 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

ACK:

> 18 	| 146.6.193.162  
> 7377 	| 132.239.181.229
> 23329 | 128.238.35.165 

Thanks

Gabe

- --
Gabriel Iovino
Principal Security Engineer, REN-ISAC
http://www.ren-isac.net
24x7 Watch Desk +1(317)278-6630

Rob Thomas wrote:
> ----------- nsp-security Confidential --------
> 
> Hi, team.
> 
> Our thanks to Jason Kendall who obtained and shared a list of devices
> compromised by the n2.exe/MS08-067 malware.  The list of effected ASNs
> is beneath my .signature block.
> 
> You'll find the list of compromised devices at the URL below; please use
> your nsp-sec login and password to access it.  We believe the timestamps
> in the last column to be correct, but the timestamps are based on the
> online criminal's timestamp settings.
> 
>    <https://www.cymru.com/nsp-sec/Owned/n2-hacked01.txt>
> 
> Forgot your nsp-sec login or password?  Scroll to the bottom of this URL
> first:
> 
>    <https://puck.nether.net/mailman/listinfo/nsp-security>
> 
> NOTE WELL:  This list of devices is bound by the nsp-sec restrictions.
> It is not to be redistributed and should be used to protect your direct
> customers and constituents only.
> 
> Have a quiet weekend!
> 
> Thanks,
> Rob.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkkGErYACgkQwqygxIz+pTvcngCfXQ0Dda1dIShU85xI1UtXeKMO
JZcAoNlnwTm6uB7xjpryr2goYgM7dCXa
=sQ54
-----END PGP SIGNATURE-----



More information about the nsp-security mailing list