Quick Summary
A new wave of spam emails is inundating users, with many receiving automated messages labeled ‘Activate your account’ from unsecured Zendesk support systems. This incident mirrors a similar attack from January, where attackers exploited Zendesk’s ticket submission feature to send mass spam. The ongoing abuse of these systems raises concerns about user privacy and the effectiveness of Zendesk’s security measures.
The Securityish Brief
A recent surge in spam emails has been reported by users worldwide, with many receiving messages that appear to be legitimate automated responses from various companies’ Zendesk support systems. These emails often contain subject lines like ‘Activate your account,’ leading recipients to believe they are associated with real account activities. Security researcher Jonathan Leitschuh highlighted the issue on social media, indicating that his inbox was flooded with such emails.
This spam wave is reminiscent of a similar incident that occurred in January, where attackers abused Zendesk’s functionality to submit support tickets without verification. Each ticket submission would automatically trigger a confirmation email, allowing attackers to send spam to numerous addresses. Companies like Dropbox and 2K were affected during that earlier campaign, with recipients reporting bizarre subject lines.
Despite Zendesk’s efforts to implement new safety features aimed at preventing such abuse, including enhanced monitoring and limits on ticket submissions, the recent activity suggests that vulnerabilities still exist. Zendesk had previously advised organizations to restrict ticket creation to verified users and to remove any placeholders that could be exploited by attackers.
Implications for Users and Organizations
This ongoing spam issue highlights the risks associated with unsecured support systems and the potential for attackers to misuse them. Users should be vigilant about unexpected emails, especially those requesting account activation or personal information. Organizations utilizing Zendesk should review their security settings to ensure that only verified users can submit tickets.
As attackers continue to exploit these vulnerabilities, it is crucial for users to monitor their inboxes for unusual activity and to be cautious about clicking links in unsolicited emails. The incident serves as a reminder of the importance of robust security measures and user awareness in preventing spam and phishing attacks.
Key Takeaways
- Monitor your email for unexpected messages labeled ‘Activate your account’ and do not click on any links.
- Verify that your organization restricts ticket submissions to only verified users to prevent spam abuse.
- Regularly review your security settings on platforms like Zendesk to enhance protection against unauthorized access.
- Educate employees about recognizing spam and phishing attempts to reduce the risk of falling victim to such attacks.
- Consider implementing additional email filtering solutions to catch spam before it reaches user inboxes.
Key Terms & Concepts
- Zendesk: Zendesk is a customer service platform that allows companies to manage support tickets and customer inquiries.
- relay spam: Relay spam refers to unsolicited emails sent through a service’s automated systems, often exploiting vulnerabilities to bypass filters.
Read the original article here: https://www.bleepingcomputer.com/news/security/zendesk-spam-wave-returns-floods-users-with-activate-account-emails/
Your 5-Minute Securityish Brief
A weekly digest of cybersecurity news, phishing alerts, privacy tips, and emerging threats, simplified so anyone can understand what matters and why.
Securityish
Securityish explains cybersecurity, scams, data breaches, and privacy risks in simple language so you know what’s happening and how to protect yourself.
© 2026 Securityish
