Abuse of web proxy access to library databases

[Jeff Giacobbe <giacobbej () MAIL MONTCLAIR EDU>]

Colleagues-

Just wanted to alert you to potential exposure of usernames/passwords
for access to various online database services.  We were alerted
anonymously yesterday that one of our student account credentials had
been posted to a "clearing house" site - in Iran, of all places. We have
locked that account after verifying that the credentials were real.

We uncovered the following site in a Google search that appears to offer
dozens of usernames/passwords for logging into various databases with
university credentials (including ours)

http://nejoom.persianblog.ir/1386_3_nejoom_archive.html

Might want to check it out in case there are compromised accounts from
your institution listed.

Regards,

Jeff Giacobbe
Dir. Systems, Security, Networking
Montclair State University