Forest Global Training Partners

Cyber Risks · Krebs on Security

Sendgrid Under Siege from Hacked Accounts

Summary: Sendgrid is dealing with a surge in customer accounts whose passwords were cracked, sold to spammers, and used to send phishing and malware, with Twilio CSO Steve Pugh acknowledging an increase in compromised accounts abused for spam. One seller using the handle "Kromatix" was offering access to more than 400 compromised Sendgrid accounts on Aug. 23, priced from $15 for accounts that can send 40,000 emails a month up to $400 for 10 million a month, while Twilio says it is working toward requiring 2FA but does not mandate it today.

Why it matters: Because many organizations let mail from Sendgrid's systems through their spam filters and its links are obfuscated, a $15 cracked account can deliver phishing into inboxes that would otherwise block it - and CAUCE's Neil Schwartzman warns that once receiving firms' machine learning treats a Sendgrid email as a sign of abuse, they will filter it whether or not Twilio acts.

Read the original at Krebs on Security ↗

Topics
Identity & Access Management
Related