A fresh wave of Zendesk spam emails is hitting users across the world

• Zendesk spam campaign persists despite new safety features
• Attackers abuse support ticket confirmations to flood inboxes with strange, non-malicious emails
• Suspected DoS attack overwhelms Zendesk systems; company admits further protections are needed

It appears Zendesk’s newly introduced safety features to address spam aren’t working, because the bizarre spam campaign has continued to this day.

BleepingComputer reported users are once again being bombarded by dozens, hundreds even - of automated emails being sent through various companies’ unsecured Zendesk support systems.

All of the emails are just strange - strange subject lines, strange content. They are not carrying malware, or links to phishing pages. Some people think this is actually a Denial of Service (DoS) attack against Zendesk which makes sense - if the company’s servers are overloaded sending out bogus emails, they can’t send out legitimate ones.