Re: Passwords & Passphrases

[Willis Marti <wmarti () TAMU EDU>]

> > We see some of this too, but I'm pretty sure most of logins from China are
> > using passwords captured by keyloggers, not password guessing.  There's no
> > pattern of repeated login attempts to the accounts used - they just log in,
> > log out, and move on to the next account/password.

Our last big compromise showed the same "no guessing" pattern, but we're
pretty sure they'd grabbed a list and attacked/cracked them offline.
They were trying to grab another large list.
--
Cheers,
 Willis Marti
 Director, Networking &
  Chief Information Security Officer
 Texas A&M University