- Vector type:
- Denial of Service Attack
- Risk level:
- Low
- Impact level:
- Low to Moderate
Although the base concept of this attack vector is quite simple, it requires a considerable degree of sophistication in order to be successful.
Essentially, all you need to do is mass-report a domain, email, or phone number as spam, in order for it to be blacklisted by providers and added to widely-distributed spam lists.
In the real world, however, elaborate systems exist nearly everywhere, to prevent exactly this kind of behavior. In order to circumvent these, the attacker needs to make a concerted effort to distribute their efforts across a wide variety of networks, devices, and users, for a prolonged period.
We have actually tested this particular attack vector and found it to be EXTREMELY EFFECTIVE when carried out properly.
Defense
There is no defense against this type of attack. Your only course of action is to have a structured Online Reputation Management program in place, and to periodically check whether your business, email addresses, and phone numbers have been added to the publicly available spam lists.