Cyber Risks · Krebs on Security

Service Rents Email Addresses for Account Signups

Summary: A service called kopeechka[.]store rents out access to established email accounts at major providers, charging about .07 rubles (roughly $0.00087) per confirmation message so customers can mass-register accounts without controlling the inboxes themselves. The code behind a Russian spammer's Mastodon botnet contained an API call to Kopeechka, which the spammer used to create thousands of valid Hotmail and other addresses; Mastodon registrations jumped from about three per minute to 900 per minute before the team halted new signups.

What you should know: At less than a tenth of a cent per confirmation, the cost of creating a convincing account at your service drops to near zero, and Mastodon's experience shows the volume can arrive faster than the software was designed to handle.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related