We had a client on Tuesday have his account compromised abd it looks like a bot network went to town with it. We were able to stop most of it however it was a lot of effort and still happened.
Is there any way in smarter mail to stop mail that starts to come in from a ton of IP addresses all at once. Most of the messages are headed to 3-5 addresses and that is it, but hundreds/thousands of different IP's doing the same thing. No normal account we have ever had sends from more than a handful of IP's and never with that type of volume. We think it was the users phone and a new app he recently installed that started it all. I think this is what is causing a lot of the compromised accounts and it seems like it would be pretty easy to recognize and stop before it gets out of hand. Any ideas? Thanks, Noah
