Dropbox users' email addresses targeted by spam?

Re:Dropbox users' email addresses targeted by spam? by bradleyland on Tuesday July 17, 2012 @11:44AM (#4256201)

While it appears plausible (likely, even) that Dropbox is the source of the disclosure, it's not verifiable as fact until someone identifies the method used to obtain the email addresses. This makes the title inappropriate.

Malware frequently targets address books and browser forms as a means of harvesting email addresses. Not saying that it can't be Dropbox, and I'm not saying that it's even unlikely, but years of troubleshooting have taught me not to name the root cause until I can verify it myself. This is even more true when you're putting someone else's reputation on the line.

[ Parent | on HN ]

Re:Dropbox users' email addresses targeted by spam? by wlesieutre on Tuesday July 17, 2012 @12:43PM (#4256522)

It also often targets specific applications to steal credentials from. I know there have been badwares that harvest saved Steam account names and passwords (hopefully they're stored more securely now, but who knows?), and the same could be true for Dropbox email addresses.

The address book scenario or dropbox breach both seem more likely, but it's worth keeping in mind.

[ Parent | on HN ]