[nsp-sec] Stolen FTP credentials

Marius Urkis marius at litnet.lt
Tue Apr 19 06:47:19 EDT 2011


ACK 2847

> Hi,
> 
> please find below a list of stolen FTP login credentials found in several lists
> on a server used for malicious activity. Unfortunately, I don't have information
> on when and how the credentials were stolen, but the filenames and timestamps
> of the lists indicate that they were harvested earlier this month.
> 
> Format: ASN | IP | CC | hostname | username | sanitized password | AS desc
> 
> 
>      - Thomas
> 
> CERT-Bund Incident Response & Anti-Malware Team


-- 
Marius

=============================
 Marius Urkis
 LITNET CERT
 http://cert.litnet.lt
 Tel: +370 37 300645
 GSM: +370 687 79059




More information about the nsp-security mailing list