Reacting to Spam

There are three main reasons for sending spam:

• a website infection,
• a form attack on website,
• a password theft.

We will present the latter two cases here.

Form attack

When the alwaysdata team encounters spam sent due to a form attack, they will:

• stop sending by disabling POST requests on the website in question,
• delete all related e-mails awaiting sending,
• warn the user.

The user will have to put a more efficient protection on the form, through the use of a CAPTCHA for example.

The WAF can be useful to block some attacks.

Password theft

In this case, they will:

• stop sending by changing the password for the affected e-mail address,
• delete all related e-mails awaiting sending,
• warn the user.

Then the user can provide a new, more secure, password to again allow access to their address.