I have a client with a hacked IMAP-Account, and the attacker(s) made thousands of password-attempts, probably with a fixed set of passwords, from different IPs before they got in.
After successful password guessing I see 10-15 different IPs connecting and pushing out spams, simply killing that little ol' post-fix server :(. After flushing 440.000 mails from the queue and resetting all passwords to secure ones, Nr 5 lives, again!
- What tool is used for distributed attacks on accounts / spam sending? i know about hydra & consorts, but I never saw a tool for botnet-like brute force. Are sources available somewhere?
Edit: changed brute-force to dictionary attack