6 ms·
Pretty clever, though I wonder how kopeechka gets around ip limitations that outlook/gmail/yahoo/etc put up. Can only connect to so many accounts before they st
by vxNsr 3y ago
Pretty clever, though I wonder how kopeechka gets around ip limitations that outlook/gmail/yahoo/etc put up. Can only connect to so many accounts before they start to get suspicious.
This also seems like a great honeypot. Offer the service for a while get a good mass of users, then make off with their accounts.
- pcmill 3y agoIf I understand it correctly it never let's the "enduser" connect directly to the email accounts. It always has a service in between. That way as far as Gmail or Outlook knows it only gets requests from one or a handful of IP addresses.
- clbrmbr 3y agoThat’s the point: a small number of IPs accessing many accounts could become suspicious. (But may not be trivial to distinguish from legitimate usage due to NAT.)
- VoidWhisperer 3y agoI would assume they probably use tor or residential proxies in order to get around any ip related rate limiting
- moneywoes 3y agoDoes Tor help here? I thought it’s blocked for clearnet sites
- crumpled 3y agoTor probably doesn't help, but it's not blocked by design. Tor traffic meets the rest of the internet via exit nodes. There are a finite number of exit nodes and some sites seem to know what they are at a given time and may block the traffic or present a bunch of extra captchas.
- Sohcahtoa82 3y agoNope, Tor usually makes things worse. Ask anyone who uses Tor for their day-to-day web browsing. They're often given additional CAPTCHAs and the like. Some sites block them entirely. Tor might hide where you're coming from, but to any website, it's obvious you're connecting from Tor.
- krebsonsecurity 3y agoThis is a fair assumption, although to be fair a botnet is essentially a collection of residential proxies. And yes, Kopeechka controls the inbox, and only lets you see stuff going forward that matches the regex you specify.