On Tue, Aug 15, 2023 at 9:29 AM Emanuel Schorsch <emschorsch=
40google....@dmarc.ietf.org> wrote:

> Still, knowing that he's a bad actor, you could skip signing.  Are there
>> so
>> many new spammers every day?  Or, rather, there is a bunch of
>> professional
>> spammers who know how to hide?
>>
>
> Just to answer the second question: Yes, absolutely. Spammers are fully
> professional and organized groups. Some of those groups are extremely
> sophisticated. They control a huge number of resources: IPs, domains,
> accounts. There are black market account resellers who provide spammers
> with large numbers of accounts at different organizations. Those accounts
> are sourced in a variety of sophisticated ways: manual creation in low cost
> countries, bulk hijacking (through data dumps, common passwords etc.).
>
> I won't pretend that there aren't some aspects of spam that can be solved
> by caring more and making simple changes. But I do want to emphasize that a
> number of very large spammer groups are extremely sophisticated and
> persistent.
>

This is our experience as well. Some signs pointed to a single
sophisticated spam group executing the majority of DKIM replay attacks.
_______________________________________________
Ietf-dkim mailing list
Ietf-dkim@ietf.org
https://www.ietf.org/mailman/listinfo/ietf-dkim

Reply via email to