[nsp-sec] NSP-SEC-6364-ALERT compromised websites (torpig)

[Jon Lewis]

ack for 6364.

6364    | 209.208.50.128   | US | soft-fetish.com 106 1241814872
hyyghevif.com iframe http://www.soft-fetish.com/members/frame2.html |
ATLANTIC-NET - Atlantic.net, Inc.

We dealt with this customer's site's main index.html last month.  I didn't 
think to scan their entire web space until now and found one additional 
file with the malicious code.  The above URL is in their password 
protected "members" area.  Do I want to know how it was discovered?

----------------------------------------------------------------------
  Jon Lewis                   |  I route
  Senior Network Engineer     |  therefore you are
  Atlantic Net                |
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________