Feeds

Dropbox brings in crack team to probe spam leakage

Email accounts crammed with gambling site grossness

The essential guide to IT transformation

Dropbox has begun investigating complaints that users are receiving spam to email addresses only associated with their accounts at the file-sharing service.

The spam, sent to addresses only used for Dropbox accounts, advertises a particular gambling website, according to users on Dropbox's forum. The behaviour has sparked concerns that Dropbox's database has been harvested or otherwise compromised, although this remains unconfirmed. One other possible explanation is that a third-party app which integrates with Dropbox is to blame for the leak.

Spambots striking it lucky and randomly hitting a run of unique and private email address associated with Dropbox seems improbable, especially given the volume of users who are complaining about "Dropbox spam" on Twitter and elsewhere. Complaints on Dropbox's own forums suggest the problem is limited to European users of the file-synching service.

In response to these concerns, a Dropbox staffer said it had called in external security experts to help with an investigation into the spam run.

We wanted to update everyone about spam being sent to email addresses associated with some Dropbox accounts. We continue to investigate and our security team is working hard on this. We’ve also brought in a team of outside experts to make sure we leave no stone unturned.

While we haven’t had any reports of unauthorized activity on Dropbox accounts, we’ve taken a number of precautionary steps and continue to work around the clock to make sure your information is safe. We’ll continue to provide updates.

The Dropbox staffer added that a 30-minute outage on Dropbox's site early on Tuesday afternoon was "not caused by any external factor or third party" and apparently was not linked to the current junk mail unpleasantness. ®

Boost IT visibility and business value

More from The Register

next story
Pay to play: The hidden cost of software defined everything
Enter credit card details if you want that system you bought to actually be useful
Shoot-em-up: Sony Online Entertainment hit by 'large scale DDoS attack'
Games disrupted as firm struggles to control network
HP busts out new ProLiant Gen9 servers
Think those are cool? Wait till you get a load of our racks
Silicon Valley jolted by magnitude 6.1 quake – its biggest in 25 years
Did the earth move for you at VMworld – oh, OK. It just did. A lot
VMware's high-wire balancing act: EVO might drag us ALL down
Get it right, EMC, or there'll be STORAGE CIVIL WAR. Mark my words
Forrester says it's time to give up on physical storage arrays
The physical/virtual storage tipping point may just have arrived
prev story

Whitepapers

Top 10 endpoint backup mistakes
Avoid the ten endpoint backup mistakes to ensure that your critical corporate data is protected and end user productivity is improved.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Backing up distributed data
Eliminating the redundant use of bandwidth and storage capacity and application consolidation in the modern data center.
The essential guide to IT transformation
ServiceNow discusses three IT transformations that can help CIOs automate IT services to transform IT and the enterprise
Next gen security for virtualised datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.