The scenario is that a website has a password recovery feature: you enter your email and if you have an account with that email, it sends you a recovery link.
But then someone writes a script that requests a recovery every 5 seconds all day long and gives someone else's email to:
- harass that person
- waste site resources sending emails
- get the site blacklisted as a spammer
- other unpleasant consequences
To be clear, the attacker doesn't compromise the site, but just causes grief of different kinds via that site emailer channel. Does this have a name?