Security Incidents mailing list archives

Exchange/Microsoft SMTP Authenticated User spam?


From: "wirepair" <wirepair () roguemail net>
Date: Tue, 14 Oct 2003 10:27:38 -0700

We've had two calls in the past month regarding supposed authenticated users sending out spam and using their external mail servers as relays. I was just curious if anyone else has seen this type of activity. I crawled the archives and saw about 4 posts and it seems quite similiar. In one case the person(s) sent over 200,000 emails in a 4 day span. Has anyone seen any scripts that do this type of attack? Or has anyone else had this happen to them or someone they know? We would like to give our client a bit more information then 'change all your passwords.' Thanks,
-wire
--
Visit Things From Another World for the best
comics, movies, toys, collectibles and more.
http://www.tfaw.com/?qt=wmf

---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: