Much has been written recently about the ongoing attacks on E-mail Service Providers and their clients by criminals looking to steal lists of e-mail addresses, and to use their infrastructure to send malware-laden spam. While reports of the attacks have appeared in mainstream media only within the last few weeks, attempts to breach ESP customer accounts and the systems of the ESPs themselves have been ongoing since late 2009. The attacks are only now coming to the attention of the general public because of one recent, high-visibility data spill.

Continue reading →