3 ms·
Mailinator and the Recent Google Docs Phishing Attack
- eridius 9y agoWhy did the phishing email need a To address at all? I've seen "undisclosed-recipients;" used very frequently as the To address of an email BCC'd to a group of people, so why not just do something like that?
- pawadu 9y agoSo basically mailinator had a list of compromised accounts (the sender of these emails) and decided to /dev/null this information instead of contacting google=
- marichards 9y agoI'm pretty sure Google has the same list from their records of sent emails.
- deleted 9y ago[deleted]
- rlpb 9y ago"In effect, they were relying on Mailinator’s proven ability to receive lots of email." No, they weren't. Mailinator's ability to receive email had nothing to do with it. This blog post even admits this itself two paragraphs down: "We noticed the activity early on, and shut down the inbound stream of emails to the hhhhhhhhhhhhhhhh inbox. Unfortunately, this did nothing to stop the attack. That's because nothing about the attack was happening via Mailinator."