logo

Zendesk spam wave returns, floods users with 'Activate account' emails

ID: 84027c15-28a2-5b06-993b-c73545801f68

STIX ID: report--84027c15-28a2-5b06-993b-c73545801f68

Feed Name: Bleeping Computer

Threat Score
35/100

Date Published: 2026-02-05

Date Updated: 2026-04-20

Author: Ax Sharma

...
...

A renewed global spam wave is exploiting unsecured Zendesk support ticket submission forms to generate legitimate-looking automated emails (such as "Activate your account") and flood recipients' inboxes; users report receiving hundreds of messages that bypass spam filters by appearing to originate from real companies' Zendesk instances. The activity mirrors a January campaign, suggesting attackers can still abuse exposed ticket portals despite Zendesk's implemented safeguards.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.