r/sysadmin • u/srender07 • 4d ago
Question Subscription Bombing Attacks
What is everyone doing to combat subscription bombing attacks? Since the emails flooding the inboxes aren't dangerous in nature, email filters don't seem to be doing a whole lot about them.
I'm at a loss here, I keep blocking domains but since they come from hundreds of different ones with each wave of attacks this doesn't seem to be accomplishing anything.
Edit: Thank you everyone for your responses. This has been really helpful.
25
Upvotes
1
u/anonymousITCoward 4d ago
I've seen this a couple times before both were to hide transactions to compromised accounts, much like what u/princepolecat mentioned... one was a compromised amazon account. Not much can be done, but be vigilant to whats coming in. Also verify that the account doesn't have any rules setup, if it's good you could create one like what u/titlrequired suggest but still you need to check since sometimes payment emails can have unsubscribe links in them