OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Exchange/Microsoft SMTP Authenticated User spam?

From: Mike Lewinski (mikerockynet.com)
Date: Tue Oct 14 2003 - 12:55:42 CDT

wirepair wrote:

> We've had two calls in the past month regarding supposed authenticated
> users sending out spam and using their external mail servers as
> relays. I was just curious if anyone else has seen this type of activity.

We have been seeing a lot of SMTP AUTH abuse, not just on Exchange but
on any platforms that support it. The perpetrator(s) appear to be going
after well known accounts with weak passwords (i.e. webmaster / webmaster).

See also:

http://www.merit.edu/mail.archives/nanog/msg15353.html
http://groups.google.com/groups?selm=3F869683.3000303%40blackehlo.cluestick.org

---------------------------------------------------------------------------
----------------------------------------------------------------------------