Hacker News Reader

Is it possible to use the exploit to send e-mails From the compromised device?

I’ve had a problem with lots of bounce mails today on one of my accounts. Apparently somebody used my SMTP for spam which I find hard to believe since I keep my password safe. It’s not part of any known public data set.

There is a good chance that the attackers have this capability also. It would be an additional component of an exploit chain. The authors did not investigate this.

Is that really that important when email data will often be the primary target of the attacker?

Yes? Details on what the scope of a issue is pretty damn important.