I'm looking for advice on how to defend against an issue where some of our users are bombarded with a large number of emails—about 30-40 in just two minutes. These emails don't appear to be spam or phishing messages, and they are getting past our security checks from both Microsoft and CheckPoint. It seems like bots are using the users' email addresses to register for all kinds of things online, such as newsletter sign-ups and password reset requests. What strategies can we implement to protect our users from this type of attack?
2 Answers
This sounds a lot like a preparation for an exhaustion attack. You might want to check more into that angle.
This could actually be worse than just email flooding. It might lead to a vishing attack where the bad actors call pretending to be from support to gain access to users' systems. Make sure to inform users to be cautious and avoid accepting calls from unknown numbers.
I've seen a rise in these types of threats lately, it's definitely something to keep an eye on!