Tries to steal FTP credentials
details
“WAREsmartftpclient 2.0settingsbackup” (Indicator: “smartftp”)
Sample here.
Server : 188.138.40.39:18892
Hosting Infos :
http://whois.domaintools.com/188.138.40.39
Categories:
Uncategorized