Found: hacker server storing two million pilfered paswords

lotuseclat79 · Dec 4, 2013

Found: hacker server storing two million pilfered paswords.

Credentials belonged to users of Facebook, Yahoo, Google, Twitter and more.
...
Taking a closer look at the IP log files, however, revealed that most of the entries from NL IP range are in fact a single IP address that seems to have functioned as a gateway or reverse proxy between the infected machines and the Command-and-Control server, which resides in the Netherlands as well. This technique of using a reverse proxy is commonly used by attackers in order to prevent the Command-and-Control server from being discovered and shut down--outgoing traffic from an infected machine only shows a connection to the proxy server, which is easily replaceable in case it is taken down. While this behavior is interesting in-and-of itself, it does prevent us from learning more about the targeted countries in this attack, if there were any.
Click to expand...

-- Tom

siljaline · Dec 4, 2013

Avoiding the obvious, if you suspect your account being hacked if you use any of these services, would be resetting your password, at a minimum.

More on this:
http://www.zdnet.com/hacker-databas...ok-twitter-google-passwords-found-7000023922/

http://www.zdnet.com/two-million-st...words-found-on-pony-botnet-server-7000023915/

Malcontent · Dec 4, 2013

http://money.cnn.com/2013/12/04/technology/security/passwords-stolen/index.html

The massive data breach was a result of keylogging software maliciously installed on an untold number of computers around the world, researchers at cybersecurity firm Trustwave said. The virus was capturing log-in credentials for key websites over the past month and sending those usernames and passwords to a server controlled by the hackers.

On Nov. 24, Trustwave researchers tracked that server, located in the Netherlands. They discovered compromised credentials for more than 93,000 websites
Click to expand...

FanJ · Dec 4, 2013

Some more links:

Trustwave's SpiderLabs
-http://blog.spiderlabs.com/2013/12/look-what-i-found-moar-pony.html

Some Dutch links (in Dutch):
-http://www.volkskrant.nl/vk/nl/2664/Nieuws/article/detail/3556507/2013/12/05/Hackers-stelen-wereldwijd-miljoenen-wachtwoorden.dhtml
-http://tweakers.net/nieuws/92980/nederlands-botnet-steelt-twee-miljoen-logingegevens.html

AlexC · Dec 4, 2013

Botnet snatches 2 million logins for Facebook, ADP, and other sites

http://www.pcworld.com/article/2068880/logins-stolen-from-facebook-google-adp-payroll-processor.html

Two million logins and passwords from services such as Facebook, Google and Twitter have been found on a Netherlands-based server, part of a large botnet using controller software nicknamed “Pony.”
Click to expand...

Dermot7 · Feb 24, 2014

“Pony” botnet pilfers digital coins worth $220,000 in sustained attack

Criminals have pilfered about $220,000 worth of bitcoins and other digital currencies in a sustained, global attack that uses malware to steal the digital wallets stored on infected computers, researchers said Monday.
Click to expand...

http://arstechnica.com/security/201...gital-coins-worth-220000-in-sustained-attack/

~ Merged Threads As Requested ~

siljaline · Feb 24, 2014

Re: “Pony” botnet pilfers digital coins worth $220,000 in sustained attack

Bitcoins, other digital currencies stolen in massive 'Pony' botnet attack

Cybercriminals have infected the computers of digital currency holders, using a virus known as "Pony" to make off with account credentials, bitcoins and other digital currencies in one of the largest attacks on the technology, security services firm Trustwave said.

The attack was carried out using the "Pony" botnet, a group of infected computers that take orders from a central command-and-control server to steal private data. A small group of cybercriminals were likely behind the attack, Trustwave said.
Click to expand...

http://www.cso.com.au/article/53906...currencies_stolen_massive_pony_botnet_attack/

Log in or Sign up

Found: hacker server storing two million pilfered paswords

lotuseclat79 Registered Member

siljaline Registered Member

Malcontent Registered Member

FanJ Updates Team

AlexC Registered Member

Dermot7 Registered Member

siljaline Registered Member

Log in or Sign up

Found: hacker server storing two million pilfered paswords

lotuseclat79 Registered Member

siljaline Registered Member

Malcontent Registered Member

FanJ Updates Team

AlexC Registered Member

Dermot7 Registered Member

siljaline Registered Member

Useful Searches