infosecslave

6 ms·

1. 1.▲
   by infosecslave 13y ago

   They're also running MySQL 3.
2. 2.▲
   by infosecslave 13y ago

   Which is blatantly false, if it was "old stuff being posted again" then the mysql credentials wouldn't have been working 60 minutes ago.
3. 3.▲
   by infosecslave 13y ago

   Logs are in the same network as the breached mysql server.
4. 4.▲
   by infosecslave 13y ago

   Same mysql server also appeared to accept * as the password for the root user.
5. 5.▲
   by infosecslave 13y ago

   Plain text credit card numbers in the file, usual linode quality.
6. 6.▲
   by infosecslave 13y ago

   Found a copy of some of the DBs. ra.pe/linode2.sql
7. 7.▲
   by infosecslave 13y ago

   It also seems to host a plenty of other linode related databases according to information pasted on IRC.
8. 8.▲
   by infosecslave 13y ago

   theshore==linode