telnet == unencrypted

a simple tcpdump is enough to get you the username and passwords

anyone dumb enough to do imporant stuff over unencryted lines deserves a little tcpdump