| 偉民 ( @ 2002-04-02 06:45:00 |
this particular haX0r installed a (undoubtedly compromised) version of ProFTPd, a bunch of backdoored replacements for various system utils, a nd cron jobs to quietly log system logins and ip address changes and mail them to "monaxikos28@yahoo.com". They downloaded the proftpd package from www.geocities.com/metal_new/ftp.tgz
Not much you can do about that. It's against yahoo's terms of service to use it for skript-kiddie activities, but they don't exactly make it easy to email them about it.
Not much you can do about that. It's against yahoo's terms of service to use it for skript-kiddie activities, but they don't exactly make it easy to email them about it.