Spam Auditor Blog

What does Transparent 2FA Solve?

Posted on October 27, 2021 by Thomas

Our previous article goes over 2FA/MFA and how it drastically cuts down the threat of automated authentication attacks. Despite the benefits, the adoption of 2FA is limited. The process of enabling and using 2FA creates extra steps for the user, … Continue reading →

Posted in Informative | Tagged 2FA, authentication, password, SIM swap, T2FA, transparent 2FA | Leave a comment

2-Factor and Multi-Factor Authentication

Posted on October 20, 2021 by Thomas

Talking about authentication just isn’t complete without mentioning 2-Factor Authentication (2FA) and Multi-Factor Authentication (MFA). Judging from the piling evidence of data breaches and weak password tendencies, using just a password as your only line of defense seems… risky. Let’s … Continue reading →

Posted in Informative | Tagged 2FA, authentication, authentication attack, brute force attack, data breach, MFA, password | Leave a comment

Alternatives to Remembering Passwords

Posted on October 20, 2021 by Chelsea

It seems in today’s world, with such large parts of our lives online and intertwined with smart devices, everything has a password. To talk to your friends, perform banking transactions, order takeout and even to pay your bills, it all … Continue reading →

Posted in Informative | Tagged authentication, biometric, biometric authentication, data breach, password, password manager, usb key | Leave a comment

Data Breaches: Why You Should Update Your Old Passwords

Posted on September 30, 2021 by Thomas

Having a strong password is great when it comes to securing your account against traditional brute force and dictionary attacks. However, credential stuffing leverages passwords exposed in data breaches to crack accounts. More information about the different types of authentication … Continue reading →

Posted in Informative | Tagged authentication, authentication attack, credential stuffing, data breach, data breaches, data leak, hacked, hashed passwords, haveibeenpwned, password, passwords, plain text passwords, rainbow table, rainbow table attack | Leave a comment

How Email Administrators Can Improve Authentication Security

Posted on September 13, 2021 by Thomas

The previous articles about authentication attacks focused on how an end user identifies and protects themselves from authentication attacks. But what about protecting the server itself, and all user accounts, from such attacks? This article goes over what can be … Continue reading →

Posted in Informative | Tagged 2FA, authentication, authentication attack, bruteforce attack, cybersecurity, data breach, dictionary attack, email server, email server security, hacked, information security, infosec, mail server, password, password spraying | Leave a comment

The Different Types of Authentication Attacks – What you can do to Protect Yourself

Posted on September 2, 2021 by Thomas

The previous article of this series goes over the basics of Authentication Attacks and Indicators that your account could be at risk. You might not be aware that authentication attacks are increasing in volume in the threat landscape. What’s worse … Continue reading →

Posted in Informative | Tagged account security, authentication, authentication attack, brute force, brute force attack, credential stuffing, dictionary attack, email security, hacked, password, password spraying, passwords | Leave a comment

What is an Authentication Attack

Posted on August 25, 2021 by Thomas

“My account has been hacked!” It’s probably not the first time that you’ve heard those words, but what exactly does it mean for your account to be hacked? I’m not referring to cases where your Ex guessed your password and … Continue reading →

Posted in Informative | Tagged authentication, authentication attack, brute force, dictionary attack, hacked, hacker, password | Leave a comment

Trends in Networks: Spam #19

Posted on March 5, 2021 by Thomas

What else can be said about the Freenom and .xyz TLD abuse on Digital Ocean at this point. Perhaps it is time to just accept that email from these TLDs should never be accepted from the Digital Ocean network. Feb26 … Continue reading →

Posted in Informative | Tagged bitcoin, bitcoin spam, digital ocean, domain, freenom, freenom tld, phishing, Snowshoe spam, spam, spammer, top level domain | Leave a comment

Trends in Networks: Spam #18

Posted on February 26, 2021 by Thomas

It’s a shame that such simple fixes can’t or won’t be done by a company to make the world a better place. I wonder if the money is really worth knowingly turning a blind eye to malicious activity, activity that … Continue reading →

Posted in Informative | Tagged bitcoin, bitcoin spam, digital ocean, domain, freenom, freenom tld, phishing, snowshoe marketing, Snowshoe spam, spam, spammer, top level domain | Leave a comment

Search

The Spam Auditor Blog: The information nexus for the anti-spam community.