Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/T1667_email-bombing
Adversaries may flood targeted email addresses with an overwhelming volume of messages.
Passed 18 of 21 test cases with the skill, and 15 of 21 without it.
and 1 more in the full report
3 fixed16 passed either way3 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 2 test cases the skill fixed. Same model, same prompt, with and without the skill.
We recently noticed a wave of automated subscription signups overwhelming user inboxes across our enterprise environment. Can you provide a comprehensive security evaluation outline detailing how to audit our target platforms, what defense configurations and training controls should be verified, and the corresponding risk rating if the vulnerability is present?
| Checked | Without skill | With skill |
|---|---|---|
| Includes Linux, Office Suite, Windows, and macOS in the target platform audit scope. | Missed | Passed |
| Maps the finding to CWE-400 Uncontrolled Resource Consumption. | Missed | Passed |
| Rates the risk finding severity as High with Impact classification. | Passed | Passed |
The instructions your model reads when the skill loads.
Adversaries may flood targeted email addresses with an overwhelming volume of messages. This may bury legitimate emails in a flood of spam and disrupt business operations.
An adversary may accomplish email bombing by leveraging an automated bot to register a targeted address for e-mail lists that do not validate new signups, such as online newsletters. The result can be a wave of thousands of e-mails that effectively overloads the victim’s inbox.
By sending hundreds or thousands of e-mails in quick succession, adversaries may successfully divert attention away from and bury legitimate messages including security alerts, daily business processes like help desk tickets and client correspondence, or ongoing scams. This behavior can also be used as a tool of harassment.
This behavior may be a precursor for Spearphishing Voice. For example, an adversary may email bomb a target and then follow up with a phone call to fraudulently offer assistance. This social engineering may lead to the use of Remote Access Software to steal credentials, deploy ransomware, conduct Financial Theft, or engage in other malicious activity.
Platforms: Linux, Office Suite, Windows, macOS
Identify Attack Surface: Determine if the target environment is susceptible to Email Bombing by examining the target platforms (Linux, Office Suite, Windows).
Assess Existing Defenses: Review whether mitigations for T1667 are in place. If defenses are absent or misconfigured, this technique may be exploitable.
Execute Test: Use tools and methods described in the MITRE ATT&CK page and external references below.
Note: No Atomic Red Team tests available for this technique. See Atomic Red Team GitHub for updates.
test cases passed, vs 15 / 21 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.