Re:Gitlab Project Hit by Spambot
by jarym on Monday February 08, 2021 @11:40AM
(#26066798)
So these 'bad actors' are they just out to find a way to DoS your service or do they have some other motive for forging millions of requests. (I get that email sending is a target - that has been the case since forever - but I'm asking about 'what else'?)
[ Parent
| on HN ]
Yes, they sure do have a motive - to send spam via a 3rd party service.
Like in this case (GitLab) - create a fake "issue" with spammy links in it and then "notify" thousands of users.
In our case - we are a helpdesk ticketing app, so bad actors sign up for a trial, then add "users" to their account and then, say, create "tickets" on users' behalf (customizing the email template by inserting spammy links).
It varies: generating inconvenience(for fun or hate towards a particular service), spreading scam URLs(leveraging existing trust relationships), SEO and improving discoverability of their projects (porn, streaming of pirated content, etc) and many more.