Opened 15 years ago
Closed 15 years ago
#4533 closed Other (rejected)
prevention of ftp credentials theft by a virus/trojan
Reported by: | Roman | Owned by: | |
---|---|---|---|
Priority: | normal | Component: | FileZilla Client |
Keywords: | gumblar virus | Cc: | |
Component version: | Operating system type: | ||
Operating system version: | xp |
Description
As a web-designer I recently had a lot of trouble with the gumblar trojan which could steal my ftp credentials (Note: I can not tell if it was stolen from dreamweaver or filezilla...).
A question which came to my mind was: how can I prevent this kind of ftp credential theft to happen again and what could a developer of ftp clients possibly do to help me prevent such theft?
See analysis of the gumbblar attack:
http://www.martinsecurity.net/2009/05/20/inside-the-massive-gumblar-attacka-dentro-del-enorme-ataque-gumblar/
Note:
See TracTickets
for help on using tickets.
The only possible solution is to prevent getting infected with malware in the first place.
You need to configure your systems properly and vigilantly check for updates to all installed programs daily. Pay an administrator if you are unwilling to spend an hour on maintenance yourself each day.