Hackers circulate FTP credentials for NYT and other big sites

Next Story

Deadly drinking game goes viral

Hackers are circulating credentials for FTP sites that include the New York Times and other organizations. These credentials are being offered for sale and some posted freely on forums and “hacker groups” around the Internet.

More than 7,000 FTP (file transfer protocol) sites are circulating, an analyst at Hold Security in Wisconsin says. The company monitors cyber-attacks and underground operations for hackers. It is responsible for noting the large data breaches at Target and Adobe Systems.

Black hat hackers are using the information to upload files to servers for unknown reasons. They could be planting software for use in distributed attacks, to gain further access into systems and networks, or to change website or other data.

The NYT says that they are taking steps to mitigate the attacks and close down the compromised servers and accounts, but did not elaborate any more.

Another organization on the list is UNICEF as well as several well-known Fortune 500 and other companies. Of the 7,000 credentials given, Hold Security says that many work, but most are either useless (do not allow file insertion) or no longer accessible.

So far, the perpetrators responsible for getting the FTP accounts is not known. They likely gained access to the FTP credentials through malware installed on worker’s computers at various organizations, key logging logins or similar. The list shows that many of the passwords are complex and not likely to have been gained through brute force guesswork.

Some of the files being uploaded to servers through the hacked credentials are .html files, which could be accessible to any Web browser and thus be used to spread more malware.


(17) TDA7381 STMicroelectronics 4 x 25 W Quad Bridge Car Radio Amplifier ICs New picture
(17) TDA7381 STMicroelectronics 4 x 25 W Quad Bridge Car Radio Amplifier ICs New
MOTOROLA 2N3507 SILICON TRANSISTOR NEW 7PCS picture
MOTOROLA 2N3507 SILICON TRANSISTOR NEW 7PCS
GE 2N3416 TRANSISTOR 32PCS NEW 2N3416GE839  picture
GE 2N3416 TRANSISTOR 32PCS NEW 2N3416GE839
Transistor Devices DLR400-15-2500A Electronic Load; 3 to 400V, 0-15A, 2500W picture
Transistor Devices DLR400-15-2500A Electronic Load; 3 to 400V, 0-15A, 2500W
FUJI 6DI85A-050 IGBT module picture
FUJI 6DI85A-050 IGBT module