OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Exchange/Microsoft SMTP Authenticated User spam?

From: Kee Hinckley (nazgulsomewhere.com)
Date: Tue Oct 14 2003 - 13:55:49 CDT

At 10:27 AM -0700 10/14/03, wirepair wrote:
>We've had two calls in the past month regarding supposed
>authenticated users sending out spam and using their external mail
>servers as relays. I was just curious if anyone else has seen this
>type of activity. I crawled the archives

There are known to be ongoing attacks against weak passwords on
Exchange servers (which apparently don't lock out attempts after
multiple failures). The references I've seen speak of attacks on
default Exchange mail accounts. I don't know if they've gone beyond
that yet, although I can't imagine why they wouldn't.
--
Kee Hinckley
http://www.messagefire.com/ Next Generation Spam Defense
http://commons.somewhere.com/buzz/ Writings on Technology and Society

I'm not sure which upsets me more: that people are so unwilling to accept
responsibility for their own actions, or that they are so eager to regulate
everyone else's.

---------------------------------------------------------------------------
----------------------------------------------------------------------------