We are aware of the issue with the badge emails resending to everyone, we apologise for the inconvenience - learn more here.
Forum Discussion
How to protect and prevent "share attacks"
Hello all, My company has been inundated by Dropbox "share" attacks, where phishers use the Dropbox share function to bypass spam filters and get fake invoices to land in coworker's inboxes. Drop...
Hi deus_ex_machina!
I'm a product manager on the sharing team.
Thanks for reaching out! We take such issues very seriously and want to assure you that we were already aware of this situation and have taken immediate actions to address it.
Ideally, this won't happen again, but if it does, please use the "Report to Dropbox" feature on the email so we can respond promptly.
Your security is our top priority. If you encounter any further suspicious activity or have additional concerns, please do not hesitate to reach back out.
Megan:
I appreciate the quick reply! It is understandable that Dropbox can't review the authenticity or intent behind every shared document, and removing that feature would negatively impact the platform.
The issue is that the attacker can quickly enumerate large lists of targets, and there is a delay between the shares being sent, and Dropbox support responding to my report. Is there any way to get Dropbox to recognize that we are a legitimate company being targeted by an active campaign, and get a more timely response to our reports?
Megan
Dropbox Staff
Dropbox StaffHey deus_ex_machina, would you mind sharing your ticket number with me, in order to review it on our system, please?
If I post the ticket number here, is it accessible to anyone, or is there a more private way for me to send it? The ticket contains company details I would rather not post in a public forum.
- Megan
If you send us the ticket number, only Community Dropbox Staff will have access to our system, in order to review the situation & had has already been discussed there deus_ex_machina.
Thank you, the ticket number is 23864949
