Feeds

Dropbox brings in crack team to probe spam leakage

Email accounts crammed with gambling site grossness

Top 5 reasons to deploy VMware with Tegile

Dropbox has begun investigating complaints that users are receiving spam to email addresses only associated with their accounts at the file-sharing service.

The spam, sent to addresses only used for Dropbox accounts, advertises a particular gambling website, according to users on Dropbox's forum. The behaviour has sparked concerns that Dropbox's database has been harvested or otherwise compromised, although this remains unconfirmed. One other possible explanation is that a third-party app which integrates with Dropbox is to blame for the leak.

Spambots striking it lucky and randomly hitting a run of unique and private email address associated with Dropbox seems improbable, especially given the volume of users who are complaining about "Dropbox spam" on Twitter and elsewhere. Complaints on Dropbox's own forums suggest the problem is limited to European users of the file-synching service.

In response to these concerns, a Dropbox staffer said it had called in external security experts to help with an investigation into the spam run.

We wanted to update everyone about spam being sent to email addresses associated with some Dropbox accounts. We continue to investigate and our security team is working hard on this. We’ve also brought in a team of outside experts to make sure we leave no stone unturned.

While we haven’t had any reports of unauthorized activity on Dropbox accounts, we’ve taken a number of precautionary steps and continue to work around the clock to make sure your information is safe. We’ll continue to provide updates.

The Dropbox staffer added that a 30-minute outage on Dropbox's site early on Tuesday afternoon was "not caused by any external factor or third party" and apparently was not linked to the current junk mail unpleasantness. ®

Beginner's guide to SSL certificates

More from The Register

next story
Ellison: Sparc M7 is Oracle's most important silicon EVER
'Acceleration engines' key to performance, security, Larry says
Oracle SHELLSHOCKER - data titan lists unpatchables
Database kingpin lists 32 products that can't be patched (yet) as GNU fixes second vuln
Lenovo to finish $2.1bn IBM x86 server gobble in October
A lighter snack than expected – but what's a few $100m between friends, eh?
Ello? ello? ello?: Facebook challenger in DDoS KNOCKOUT
Gets back up again after half an hour though
Hey, what's a STORAGE company doing working on Internet-of-Cars?
Boo - it's not a terabyte car, it's just predictive maintenance and that
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
The next step in data security
With recent increased privacy concerns and computers becoming more powerful, the chance of hackers being able to crack smaller-sized RSA keys increases.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.