On Tue, Aug 15, 2023 at 9:29 AM Emanuel Schorsch <emschorsch= 40google....@dmarc.ietf.org> wrote:
> Still, knowing that he's a bad actor, you could skip signing. Are there >> so >> many new spammers every day? Or, rather, there is a bunch of >> professional >> spammers who know how to hide? >> > > Just to answer the second question: Yes, absolutely. Spammers are fully > professional and organized groups. Some of those groups are extremely > sophisticated. They control a huge number of resources: IPs, domains, > accounts. There are black market account resellers who provide spammers > with large numbers of accounts at different organizations. Those accounts > are sourced in a variety of sophisticated ways: manual creation in low cost > countries, bulk hijacking (through data dumps, common passwords etc.). > > I won't pretend that there aren't some aspects of spam that can be solved > by caring more and making simple changes. But I do want to emphasize that a > number of very large spammer groups are extremely sophisticated and > persistent. > This is our experience as well. Some signs pointed to a single sophisticated spam group executing the majority of DKIM replay attacks.
_______________________________________________ Ietf-dkim mailing list Ietf-dkim@ietf.org https://www.ietf.org/mailman/listinfo/ietf-dkim
