Researchers last month at online security company Finjan uncovered a 1.4 gigabyte cache of stolen data from North America, Europe, the Middle East and India on a Malaysian server that provided command and control functions for malware attacks in addition to being a drop site for data harvested from compromised computers. Since the discovery in early April, the companyÂ’s Malicious Code Research Center has discovered two similar servers in different parts world with similar data. They appeared to have been in operation for shorter periods of time.The crimeserver was discovered by analysts monitoring outgoing traffic from a Finjan customerÂ’s network. Following the traffic to its destination led them to the unprotected server holding the data. The server also contained several Trojans and the payload injected into compromised Web sites in addition to command and control software for the attacks and the stolen data.
The server was registered to a man from Moscow and was hosted in Singapore at the time it was discovered. It has since been shut down. The company notified more than 40 major international financial institutions in the United States, Europe and India in addition to international law enforcement agencies including the FBI.