Security Incidents mailing list archives

Re: Exchange/Microsoft SMTP Authenticated User spam?


From: Mike Lewinski <mike () rockynet com>
Date: Tue, 14 Oct 2003 11:55:42 -0600

wirepair wrote:

We've had two calls in the past month regarding supposed authenticated users sending out spam and using their external mail servers as relays. I was just curious if anyone else has seen this type of activity.


We have been seeing a lot of SMTP AUTH abuse, not just on Exchange but on any platforms that support it. The perpetrator(s) appear to be going after well known accounts with weak passwords (i.e. webmaster / webmaster).

See also:

http://www.merit.edu/mail.archives/nanog/msg15353.html
http://groups.google.com/groups?selm=3F869683.3000303%40blackehlo.cluestick.org




---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: