News for hackers. Stuff that matters.
Re:Sendgrid under siege from hacked accounts by afrcnc on Saturday August 29, 2020 @02:55PM (#24318536)
how I hate this kind of reporting

3 people complain on reddit and it's now "[COMPANY X] under siege"

Re:Sendgrid under siege from hacked accounts by krebsonsecurity on Saturday August 29, 2020 @03:56PM (#24318955)
Spend a few minutes looking at the spam list threads linked in the article. This is not just a few people complaining. E.g.:

https://www.mail-archive.com/search?l=mailop%40mailop.org&q=...

There was a ton of material I did not include in the story, including a story from a company that had a client have 40 million phishing emails sent through their Sendgrid account, which it turns out was set up by an employee long ago who was no longer with the company and had not turned on 2FA (and probably was re-using passwords).

I started reporting this story almost a month ago after receiving more than 3 emails from different IT experts who were really frustrated with the amount of malware and phishing coming from Sendgrid accounts. They were frustrated because they couldn't block Sendgrid outright because too many companies they were expecting regular emails from used the platform.

The day before I published the story, I head from someone else who was getting phishing attacks spoofing Aruba Networks.

Re:Sendgrid under siege from hacked accounts by jlgaddis on Saturday August 29, 2020 @03:10PM (#24318654)
Between the comments on the article itself and this HN thread, there's already more than 10 times that. It's not being exaggerated quite the way that you "hate".

To further prove how bad SendGrid is, Invaluement recently spent a ton of time and energy to create an entirely new "Service Provider DNSBL" [0] -- just for SendGrid! In fact, they just announced it about a week ago [1].

[0]: https://www.invaluement.com/serviceproviderdnsbl/

[1]: https://www.mail-archive.com/[email protected]/msg11403.html

Re:Sendgrid under siege from hacked accounts by tobltobs on Sunday August 30, 2020 @03:15AM (#24321902)
You also could have a look on twitter how many people with hacked accounts try to reach sendgrid support via this channel.