Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
E-mail typosquatting poses leakage threat
Robert Lemos, 2008-02-21
Comments Mode:
E-mail typosquatting poses leakage threat 2008-02-22
Anonymous
Someone may have presented it this year at black hat but StankDawg warned of the same thing in detail last year here. http://www.digitaldawgpound.org/stankdawg/post=245 ...

[ more ]  [ reply ]
E-mail typosquatting poses leakage threat 2008-02-22
Bob
This happened to us about five years ago. Someone registered a typoed domain and put up an SMTP server. They then collected bunches of emails and sent them all to the CEO with some bogus note about how the domain was for their company but it was getting our email. (It had been registered six months ...

[ more ]  [ reply ]
E-mail typosquatting poses leakage threat 2008-02-22
thomas (at) kuehne (dot) cn [email concealed] (1 replies)
9 connection attempts per domain and day is neglectable. 93 connection attempts per IP hints at mob spammers(spam bot tries to deliver many emails concurrently to the same mail server). Due to a missing control experiment (e.g. 124 random domain names), the data is totally without value.

In addit...

[ more ]  [ reply ]
Just the spam ma'am 2008-02-25
Anonymous
Indeed - with that many connections from that few unique IPs the numbers suggest it was all or primarily spam.

The email attempts needed to be accepted and examined, not just rejected out of hand, otherwise the fact that someone/something connected to your mail server and made a delivery attempt ...

[ more ]  [ reply ]







 

Privacy Statement
Copyright 2009, SecurityFocus