4 ms·
When you find a phishing email, do you have a program that spams their "docusign" login with vast quantities of plausible-looking but fake credentials? IMHO ac
by avn2109 8y ago
When you find a phishing email, do you have a program that spams their "docusign" login with vast quantities of plausible-looking but fake credentials?
IMHO active countermeasures are always the best approach to stuff like this. Attack, attack, attack.
Also I could imagine giving them special fake usernames, such that when they try to login via that special fake username, it turns on extra metrology and slowbanning/cpu intensive operations etc.
- dmbaggett 8y agoWe don't do this kind of thing, but some companies do offer "take-down" and related services. Not sure if credential-DDoS is one of them though. :)
- brightball 8y agoThe 2nd option you mention, submitting honeypot credentials and then watching for login attempts, is helpful with a comprehensive defense.
- marmot777 8y agoWhat’s the objective? Is it meant as deterrence of future attacks, retribution, or maybe other objectives? I’m not criticizing, I’m trying to learn.