techhub.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
A hub primarily for passionate technologists, but everyone is welcome

Administered by:

Server stats:

5.4K
active users

#sendgrid

5 posts4 participants0 posts today

If you recently registered for an account and did not receive the expected confirmation email, my apologies. The site's outbound email setup failed; frankly, it just wasn't very robust.

As of an hour ago I've switched to #Sendgrid, which I expect will greatly improve things.

I see more and more phishing campaigns using compromised sendgrid accounts to send their phishing payloads to potential victims. This makes it harder to detect, as both SPF and DKIM records may authenticate the message, and any phishing links are obfuscated by the sendgrid link tracking feature.

This again means that the payload is more likely to slip through spam and email verification filters.

This is not a new phenomenon, but it seems to have become more common lately.

Here are some sendgrid domains that I have recorded sending phishing emails to one of my honeypot emails. Including a count of how many instances from each:

     1 u14316059.ct.sendgrid
     3 u1745908.ct.sendgrid
     4 u2135035.ct.sendgrid
     2 u22130470.ct.sendgrid
     1 u25891187.ct.sendgrid
     2 u26465819.ct.sendgrid
     6 u33170455.ct.sendgrid
     1 u34750922.ct.sendgrid
     8 u34933879.ct.sendgrid
     4 u39338181.ct.sendgrid
     4 u39840881.ct.sendgrid
     2 u40053292.ct.sendgrid
     2 u40053620.ct.sendgrid
     4 u47546984.ct.sendgrid
     3 u7351105.ct.sendgrid
     2 u8325676.ct.sendgrid

This is most likely incomplete, as I have not been specifically looking for this pattern before lately.

#phishing #infosec #ioc #spam #sendgrid
hub.volse.noVolse Hubzilla

Just received a #phishing Email that I almost fell for.
I’ve had a #Sendgrid account for a while that I used to use for a project, this account has now been inactive for quite a long time. Today I received an Email from „SendGrid“, informing me that I needed to click a link to verify my account. Thing is, said Email originated from SendGrid’s own SMTP servers, and the URL I was supposed to click does link to ct.sendgrid.net, making this look extremely legit.

#Sendgrid lets customers use custom domains for click tracking in transactional emails, but don't provide SSL certs and use `http://` on all links. It’s 2024; `https://` should be ubiquitous. 🤷‍♂️

If you enforce `https://` for all urls like me, you'll get `NET::ERR_CERT_COMMON_NAME_INVALID` errors. This happened with two emails I received today.

Don't use vanity domains with a SaaS unless they provide SSL certs for it.

I don’t know HOW the fuck #Twilio #SendGrid calculates their usage but just a request to #BirdButt members: if there are certain email alerts/notifications that you do not care about receiving, feel free to go into mastodon settings and switch those ones off.

Theoretically only ONE message sent today (what it shows in the activity feed for past three days) yet it thinks 91 messages were sent? wtfover? What happens if limit is hit? just stops sending for the day? They don't have my payment info.

Plunk: The #OpenSource #Email #Platform

Plunk is an open-source email platform built on top of #AWS #SES. It allows you to easily send emails from your applications. It can be considered as a self-hosted alternative to services like #SendGrid, #Resend or #Mailgun.

Features
- Transactional Emails: Send emails straight from your API
- Automations: Create automations based on user actions
- Broadcasts: Send newsletters and product updates to big audiences

github.com/useplunk/plunk