Everyone knows Trojans steal personal data, but the discovery of a server containing more than 1.4 gigabytes of stolen business and personal info brings home the real extent of the problem.

Data on the so-called crimeware server compromised 5,388 unique log files containing both email communications and web-related data. Net security firm Finjan reports that information on the server included business and customer data from 40 top-tier global businesses, including healthcare providers. It reckons the data was amassed in less than a month using two strains of malware - Backdoor IRCBot-CDO and Trojan-PSW Agent-AFA.

The compromised data was left in plain view on the hacker-controlled server, without any access restrictions or encryption. Thus the sensitive information was available to anyone who came across the server, not just the hackers who controlled it.

The compromised data and the Command and Control applications were detected by Finjan using its code inspection technology. It reckons the compromised data represents the tip of a "cybercrime iceberg".

Finjan notified the affected financial institutions - located in the US, Europe and India - and law enforcement agencies prior to issuing an alert on the attack on Tuesday. ®

Related stories

• Cybercrime server exposed through Google cache (23 March 2009)
• Updated Pinch Trojan lives on after authors' convictions (5 February 2009)
• Security researchers lift the lid on Torpig banking Trojan (31 October 2008)
• Romanian cops cuff 24 cybercrime suspects (17 July 2008)
• Drive-by download attack compromises 500K websites (13 May 2008)
• Whitehats tackle The Great Botnet Dilemma (29 April 2008)
• Botnet agent plays lost sheep to avoid detection (28 April 2008)
• MayDay! MayDay! Ruskies reinvent cyber crime (13 February 2008)
• The balkanization of Storm Worm botnets (15 October 2007)
• Fast flux foils botnet takedown (11 July 2007)