If someone has access to your ssl website with valid username and password you assume that either 1 of 2 things have happened: A someone has a keylogger and their computer is compromised. B someone just out and out gave the information away.
Is that a correct assessment? If you have the IP from the 'hacker' that accessed your website who do you report it too??? Most likely it is a bot and nothing can be done but who do you report it too none the less??? ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
