And possibly used in a different type of attack, filling up a mailbox or
mailboxes with so much junk they don't see the payment notification from
the bank, etc. Possibly not, based on the small volume you stated.
There are other things to play with than just sending random spam.
With Gratitude,
Dave Brockman
Senior Network Engineer
Gig City Cloud, LLC
On 3/27/2025 5:36 PM, Aaron C. de Bruyn via mailop wrote:
You're probably thinking of it from the position of spamming people.
It's probably just some automated tool searching for ways to attack
various websites using guessed or stolen credentials.
-A
On Thu, Mar 27, 2025 at 2:06 PM Jaroslaw Rafa via mailop
<mailop@mailop.org <mailto:mailop@mailop.org>> wrote:
Hello,
a few days ago someone managed to abuse an account registration form
on my
personal website and a few dozens of random recipients at different
domains
(mostly at Yahoo) got registration confirmation emails from my
address. The
scale of the attack was not big, it was about 20-30 mails in total
until I
noticed it and secured the form to block the attack.
However I wonder - and here I'm looking for your opinion - what can be a
possible gain for the attacker from such an attack? The form does
not have
any field to enter own information that could be passed to the
recipient -
just login, password and email - so all the recipient gets is a standard
message saying that someone registered an account named XYZ on my
website
using their email address, and if they want to confirm it, they
should click
the link, otherwise do nothing and the registration will expire in
24 hours.
How can anyone benefit from spamming people with such messages?
--
Regards,
Jaroslaw Rafa
r...@rafa.eu.org <mailto:r...@rafa.eu.org>
--
"In a million years, when kids go to school, they're gonna know:
once there
was a Hushpuppy, and she lived with her daddy in the Bathtub."
_______________________________________________
mailop mailing list
mailop@mailop.org <mailto:mailop@mailop.org>
https://list.mailop.org/listinfo/mailop <https://list.mailop.org/
listinfo/mailop>
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
