
The high rate of these requests, in addition to the considerable number of targets, caught our attention. We first felt a “disturbance” in mid-October, when several of our customers were bombarded with suspicious WinHTTP POST requests from yet-unidentified bots. It was while monitoring the activity of such bots that we saw spammers turning to the dark side of the Force. Once a target is found, spammers will unleash a host of form-filler bots on the send-to-a-friend form, using them to send thousands of emails with embedded malicious links.

Example send-to-a-friend form as filled in by a spam bot Motivated by the aforementioned, spammers will actively search for sites with send-to-a-friend functions that can be exploited for their own purposes.įig 1. Abusing third-party email services is a good way to avoid these high costs.

As the name suggests, their purpose is to help users email the details of a product/service to their friends.


share-with-a-friend) is a social sharing module commonly found on commercial websites. Form-Filler Bots and Send-to-a-Friend Spam This is what we recently witnessed firsthand while mitigating a wave of send-to-a-friend spam attacks with an interesting thematic twist. With the internet abuzz about recent trailers, looming figures appearing in posters and spoilers in beer glasses, it looks like no one is immune to Star Wars fever, not even cybercriminals. Online excitement is at an all-time high, as the December release of Star Wars: The Last Jedi, the latest installment in the Star Wars saga, draws closer.
