[nsp-sec] Bounce message backscatter attack against abuse mailbox

[Andreas Lorentzen]

Hi

We had the same thing happen to our abuse@ three days ago. It lasted
about 24 hrs.
It was quite annoying, but didn't cause any real harm.


Best regards
Andreas Lorentzen
Network Abuse Manager
NextGenTel AS

-----Original Message-----
From: nsp-security-bounces at puck.nether.net
[mailto:nsp-security-bounces at puck.nether.net] On Behalf Of Mike Hughes
Sent: Thursday, April 24, 2008 3:03 PM
To: nsp-security at puck.nether.net
Subject: [nsp-sec] Bounce message backscatter attack against abuse
mailbox

----------- nsp-security Confidential --------

Folks,

Just FYI more than anything, we're seeing the second bounce message
backscatter attack targeted at our abuse@ mailbox in 12 hours.

Someone sending what looks like old spams out with a From: line of our
abuse role account, evidently intended to joe-job or cause nuisance to
people monitoring that here.

Not massive in terms of rate, about 20 per minute, but it will probably
get
annoying if these keep coming in for more than about 5-10 mins. We
already
correctly recognise them as bounces and don't open cases for them
anyway.

Wondered if anyone else is seeing an increase in rate of this sort of
thing?

Mike
-- 
Mike Hughes     Chief Technical Officer  London Internet Exchange
mike at linx.net   http://www.linx.net/



_______________________________________________
nsp-security mailing list
nsp-security at puck.nether.net
https://puck.nether.net/mailman/listinfo/nsp-security

Please do not Forward, CC, or BCC this E-mail outside of the
nsp-security
community. Confidentiality is essential for effective Internet security
counter-measures.
_______________________________________________