Hi

> Anybody else seeing increase phishing through sendgrid?  They look 
> fairly convincing.
> 
> A few paypals, and a few amazons.

Add Netflix
Add Joe-Jobs

> I thought sendgrid were ok?    Has somebody leaked a big pile of 
> sendgrid usernames and passwords or something?

Yes, I contacted their abuse desk on the Netflix case - No reaction.
Redirection Service to the phishing site on their platform was still
active after a couple of days (didn't re-check recently).

Also contacted them with a GDPR Request because of the joe-job so they
would need to reveal their customer. No reaction after about one month
now.

So attempted to contact their legal department. Their website redirects
to Twilio (yes, they seem to have purchased sendgrid).

And indeed, I also have a long lasting case open with the legal team of
twilio regarding one of their customers using a swisscom mobile phone
number to send SMS spam for what looks like a loan fraud scheme.
Swisscom only has the information that Twilio is their
'Reselling' customer and doesn't know the end-customer behind Twilio.

Swiss telecommunication laws require them to identify the customer
sending those SMS: But also here: No reaction from their legal team and
ofcom has no way to put a fine on them, because they are not a
registered telco in Switzerland.

I suspect the IP Ranges of Sendgrid are bound for a global blacklisting
if they keep ignoring abusive behaviour of their customers.

-- 
Mit freundlichen Grüssen

-Benoît Panizzon- @ HomeOffice und normal erreichbar
-- 
I m p r o W a r e   A G    -    Leiter Commerce Kunden
______________________________________________________

Zurlindenstrasse 29             Tel  +41 61 826 93 00
CH-4133 Pratteln                Fax  +41 61 826 93 01
Schweiz                         Web  http://www.imp.ch
______________________________________________________

_______________________________________________
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Reply via email to