Quote:
Originally Posted by BinaryReason
I was talking about the storage method of passwords on your local machine and not actual protocol itself (which I also mentioned).
A quick search of Filezilla password recovery, will show plenty of tools that simply extract that data.
Though as I said, the scope of these attacks, suggests a network sniffing trojan, that extracts the passwords.
|
You are absolutely right with your investigation.
FileZilla and older versions of other FTP softwares like WS_FTP_Pro have this problem. One should never store FTP credentials in a FTP software.
A notepad would be safer option to store your passwords, never store your FTP login credentials in a FTP software.