[nsp-sec] ACK 3303 RE: Stolen FTP credentials

[Stéphane Dodeller]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

Ack 3303, thanks for the info!
I'll forward the relevant data to AS12980, 21069, 21217, 25420, 29222, 29245, 44038, 50070

Regards

Stéphane


> 
> ----------- nsp-security Confidential --------
> 
> Hi,
> 
> please find below a list of stolen FTP login credentials found in
> several lists
> on a server used for malicious activity. Unfortunately, I don't have
> information
> on when and how the credentials were stolen, but the filenames and
> timestamps
> of the lists indicate that they were harvested earlier this month.
> 
> Format: ASN | IP | CC | hostname | username | sanitized password | AS
> desc
> 
> 
>     - Thomas
> 
> CERT-Bund Incident Response & Anti-Malware Team

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBAgAGBQJNrWRWAAoJEOSB/9UpeWIUkMsIAJWsJfmzvlNu2d4UI3bLAGxZ
VMpwGaFyKZYzTJiraJTIZZ8q2RUb81S6MYLQx9fCTcdgBhwalRZl4h02gvjdzCIb
Fe8kLaj/zMiCvxqgd4ElCbP09EG5o7G4Hkpvz6J9iE4ZLhg6e+zM87YIpVwnuCed
l+mp2dVkNFx4690fADFcvebH/PvZVk+avqtWR1VNsmEQSUwzgl7avvpaJOm8IA53
z0Xc++j6hbVXJnmftzV5vxBxGViITYo+deBnW548pHdRpYnccUoyTzH4KhIRvxxL
iuKGT2CKDKWH2/s2cO23+XbaSPKh/1OhQgFLCHBHWaycLmKpdjKNyaden/OnPFc=
=CC/6
-----END PGP SIGNATURE-----