Massive Site Compromise

A security researcher has uncovered administrative login credentials for over 200,000 web sites, according to a report Friday in Computer World.

Ian Amit, security research director at Aladdin, said the sites included the US Postal Service and Fortune 500 companies. He wouldn't disclose any site names other than that of the USPS.

Amit found the logins on a server compromised by Neosploit, a hacker tool kit used by cybercriminal gangs.