[cobalt-users] one more thing - hacked or not

["gr@xxxxxxxxxxxxx" <gr@xxxxxxxxxxxxx>]

Hi

just a thing we noticed last year after the last big hack fest was that 
although we didn't get hacked we did get the kiddies using the credit card 
info they gained to get "proper" accounts on our machines - we caught one 
in the act of uploading his toolkit!

We then got hit by about 15 different attempts to buy hosting packages (and 
in fact still are getting hit 9 months later)

This is even more dangerous than the Bind hack as they are inside jobs - 
they take there time

There are some defining features of the attempts but don't want to post 
them here - it's our only step ahead right now! But we ill send what little 
info we have on there patterns to any sys admin email address if anyone 
wants it - just email me off-list.

Gary