[nsp-sec] Bounce message backscatter attack against abuse mailbox

[Fredrik Widell]

On Thu, 24 Apr 2008, Mike Hughes wrote:

> ----------- nsp-security Confidential --------
>
> Folks,
>
> Just FYI more than anything, we're seeing the second bounce message
> backscatter attack targeted at our abuse@ mailbox in 12 hours.
>
> Someone sending what looks like old spams out with a From: line of our
> abuse role account, evidently intended to joe-job or cause nuisance to
> people monitoring that here.
>
> Not massive in terms of rate, about 20 per minute, but it will probably get
> annoying if these keep coming in for more than about 5-10 mins. We already
> correctly recognise them as bounces and don't open cases for them anyway.
>
> Wondered if anyone else is seeing an increase in rate of this sort of thing?



Yes, I have had that to several of my adresses, a couple of thousand
bounces to each,


>
> Mike
>

-- 


Best regards

 	/Fredrik
 	icq:2991999 jabber:widell at jabber.se msn:fredrik at widell.net
 	FW526-RIPE