Cyber Risks · Krebs on Security

Massive Email Bombs Target .Gov Addresses

Summary: Over the weekend, unknown attackers flooded more than 100 government email addresses across various countries with subscription requests to thousands of email lists, an attack Spamhaus said succeeded largely because many list operators do not validate new signups. Spamhaus began telling ISPs on Sunday to block email from some of the largest email service providers, and by Monday those ESPs were hearing from clients whose marketing mail was not being delivered.

Why it matters: One sender identified fewer than 10 addresses each signed up to almost 10,000 of its customer lists over a two-week period, and Spamhaus's response was to list major ESPs whose clients then lost deliverability - so an unvalidated signup form on your list can turn your own mail stream into the casualty.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related