/
← Voltar ao feed
medium consumer finance

Email bombing used to bury fraud alerts and set up fake tech-support remote access scams

1 fonte(s) · 1 atualização(ões) · publicado 16/10/2026 06:00 · coletado há 1 dia

This ESET WeLiveSecurity article explains email bombing (also called form, list or subscription bombing) and cites a September report of a Virginia woman flooded with hundreds of emails in 24 hours. The flood hid a genuine bank alert about a fraudulent laptop purchase. Attackers use bots to sign a harvested email address up to many legitimate services. The resulting welcome emails usually pass spam filters and create a smokescreen for account takeover or fraudulent purchases. They also set up a follow-on call from a fake tech support engineer who asks for a fee or pushes the victim to install remote access software. In corporate settings, the article notes that ransomware affiliates have used email bombing before posing as IT help desk staff to gain remote access.

Technical Details

  • Email addresses are obtained from historic data breaches, marketing databases, online leaks or prior phishing.
  • Bot-powered tools sign the address up to newsletters, subscriptions, mailing lists, free trials and competitions.
  • The goal is to hide password reset notices, new-device alerts or purchase invoices, or to set up vishing-style tech support fraud.
  • Remote access software installed under false pretences can lead to theft of browser-stored passwords and additional malware.
  • Corporate targets face distraction from data breach, BEC or invoice fraud, operational disruption for extortion, or insider misuse.

Remediation

  • Do not unsubscribe en masse. First search the inbox and spam folder for security alerts, new device sign-ins, email or phone changes, password resets and purchases, and preserve them.
  • Check sensitive accounts (bank, PayPal, cards, crypto, social media), including forwarding rules and sent/deleted folders.
  • Change passwords to unique, strong credentials, enable 2FA (authenticator app or passkey) and verify recovery details.
  • Hang up on anyone offering to fix the email problem, and never install remote access software at their request.
  • Keep email addresses off public pages, use a password manager, and use a secondary address for shopping and leisure.
  • Delete the flood in batches by sender, domain or date range only once the issue is resolved.

Linha do tempo

  1. welivesecurity.com ↗ · pub. 16/10/2026 06:00 · coletado 19/10 18:00 primeiro registro

    Email bombing used to bury fraud alerts and set up fake tech-support remote access scams

    ler a análise desta fonte

    This ESET WeLiveSecurity article explains email bombing (also called form, list or subscription bombing) and cites a September report of a Virginia woman flooded with hundreds of emails in 24 hours. The flood hid a genuine bank alert about a fraudulent laptop purchase. Attackers use bots to sign a harvested email address up to many legitimate services. The resulting welcome emails usually pass spam filters and create a smokescreen for account takeover or fraudulent purchases. They also set up a follow-on call from a fake tech support engineer who asks for a fee or pushes the victim to install remote access software. In corporate settings, the article notes that ransomware affiliates have used email bombing before posing as IT help desk staff to gain remote access.

    Technical Details

    • Email addresses are obtained from historic data breaches, marketing databases, online leaks or prior phishing.
    • Bot-powered tools sign the address up to newsletters, subscriptions, mailing lists, free trials and competitions.
    • The goal is to hide password reset notices, new-device alerts or purchase invoices, or to set up vishing-style tech support fraud.
    • Remote access software installed under false pretences can lead to theft of browser-stored passwords and additional malware.
    • Corporate targets face distraction from data breach, BEC or invoice fraud, operational disruption for extortion, or insider misuse.

    Remediation

    • Do not unsubscribe en masse. First search the inbox and spam folder for security alerts, new device sign-ins, email or phone changes, password resets and purchases, and preserve them.
    • Check sensitive accounts (bank, PayPal, cards, crypto, social media), including forwarding rules and sent/deleted folders.
    • Change passwords to unique, strong credentials, enable 2FA (authenticator app or passkey) and verify recovery details.
    • Hang up on anyone offering to fix the email problem, and never install remote access software at their request.
    • Keep email addresses off public pages, use a password manager, and use a secondary address for shopping and leisure.
    • Delete the flood in batches by sender, domain or date range only once the issue is resolved.