how current can you get? though you might like to take a look a crime in progress

220-Connecting To MegaCrew's l337 FTP Server....
220-.:::::::::::::::::::::::
220-.::: ____________________________________________________
220-.:::| ╕,°ñ░`░ñ°,╕╕╕╕╕╕╕╕╕╕╕
220-.:::| .Welcome to
220-.:::| MegaCrew
220-.:::| ``````````░ñ°,╕╕,°ñ░`
220-.:::|____________________________________________________
220-.:::::::::::::::::::::::
220-.:::|____________________________________________________
220-.:::| USER INFO:
220-.:::|
220-.:::| ñ Your IP Address : xx.xxx.xx.xxx
220-.:::| ñ Current Time : 11:55:34
220-.:::| ñ Current Date : Monday 16 February, 2004
220-.:::|____________________________________________________
220-.:::::::::::::::::::::::

This is from the server used to download a keylogger that looks only for info on bank accounts then emails it to an '.ru' mail server. the originating address of the email is in china which is no doubt owned by someone from somewhere else.


victims are lured to a website threw an email:

Hello...

It has come to my attention that you are being under the police investigation.
Is that true? Have you really commited such crimes?

Please read the following article located at:

http://federalpolice.com:article872[...#39;1075686747


where they see what appears to be a server error page which is actually a web page made to download an executable (threw the mime type vuln) which is named javautil.zip and execute it.

the web server that is being used is a completly owned server. (its really disgraceful)

the hacked server is still up '1075686747' for anyone wanting to get a first hand look at it but the police have been notified and are probably watching it.

more info:

http://spamwatch.codefish.net.au/mod...article&sid=55