Well, it seems the botnets are coming back. After two weeks of almost nothing, today the SASL login attempts and support tickets opened using one of my email addresses are coming back. So. Back to business as usual. Report spammers and blocking these botnet IP adresses.
Discussion
Loading...
@jwildeboer what do you think triggered this sudden return?
@_elena Simplest guess: one of my enemies decided it was still worth sending a botnet my way and topped up his account. More complex guess: The attacks stopped at the same time the US and Isreal started their war on Iran and Iran switched off internet connections. So maybe the C&C (Command and Control) servers became unreachable and they needed this time to set up new ones and reconnect their infected machines.
@jwildeboer thank you for this. I remember you saying that the drop in botnet activity stopped when Iran's internet access was cut off at the start of the war. This is so wild... best of luck defending yourself against the attacks!