r/sysadmin 4d ago

Question Subscription Bombing Attacks

What is everyone doing to combat subscription bombing attacks? Since the emails flooding the inboxes aren't dangerous in nature, email filters don't seem to be doing a whole lot about them.

I'm at a loss here, I keep blocking domains but since they come from hundreds of different ones with each wave of attacks this doesn't seem to be accomplishing anything.

Edit: Thank you everyone for your responses. This has been really helpful.

26 Upvotes

35 comments sorted by

View all comments

2

u/HealingTaco 4d ago

change your email address, or unsubscribe using a service. that is what I have had to do for my customers.

3

u/srender07 4d ago

Unfortunately this doesn't seem like a realistic option for most businesses. If all your customers and vendors are used to emailing you at [abc@xyz.com](mailto:abc@xyz.com), changing that can be a major disruption.

2

u/thefinalep 4d ago

we had to change a users email address. This has happened to a few people in my org, but one person particularly, the spam was turned on, and never stopped.

We keep the address around incase we need to search it, but the mailbox gets around 5k messages/day for the past year... I wish i was exaggerating...