A massive email-based attack occurred over the weekend of August 13 and 14, which resulted in the flooding of 100+ email inboxes for various government accounts, and other smaller targets.
The attacks, called "email bombs," took place because careless website owners and mailing list managers had not secured their web forms against automated bots.
An unknown group had compiled a list of unsecured web forms and mailing lists and subscribed official government email addresses to these lists.
Mailing lists and WordPress sites abused in the attack
Attackers used bots to take a target's email address and enter it into a contact form, account registration form, or mailing list that generated an automated response in the form of confirmation or notification email.
On Monday morning, government officials or other affected parties who opened their email clients found hundreds or thousands of email subscription confirmations in their inboxes.
Because thes...
Intelligence View
⚡ tsecurity.de Intelligence
Email Bomb Attack Hits 100+ Government Accounts
A massive email-based attack occurred over the weekend of August 13 and 14, which resulted in the flooding of 100+ email inboxes for various government…
Cyber Threat Intelligence & Forensik
Bedrohungsgraph · ATT&CK-Mapping · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC