Email Bomb Attacks
One of my credit card + email address combinations was compromised, and I've been suffering an email bomb attack for the past 12 hours. I cancelled the card and disputed the transactions within the first 30 minutes, and so expected the email bomb to stop. However I have now received about 4,000 spam emails to a gmail account over the past day. How long do these attacks last, and are there any additional attacks that I should be aware of?
I initially assumed the email bomb was a smoke screen to cover for the fraudulent transactions. When the spam failed to abate I then assumed some sort of credential stuffing attack, but the remaining spam is nothing but repeated email confirmations from low-value or zero-value sites: Ramp Network, Skool, Zoom, Remind, Mozilla (e.mozzila.org asking to confirm newsletter subscription), Reddit (asking to confirm my <email>+<randomstring>@gmail.com, which has been added to one of a handful of pre-existing reddit accounts composed of a random string), sellpass, Tommy Hilfiger, VIAO, JustCandy, SHOULDER, a bunch of university mailing lists, a bunch of Spanish-speaking web services I've never heard of, and a handful of extremely racist domains, and so forth. A common denominator in a lot of the services and storefronts involved is the string "awdawa...".
I haven't yet gone through every spam entry to ensure that no high-value emails are being obscured. I've confirmed that my email hasn't been breached. Gmail doesn't let security activity entries be deleted, so I'm pretty confident of that. I haven't pissed anyone off afaik. Luckily that email/card combination is specific to only two locations. The spam seems to arrive in waves, about 100 emails over five minutes every 10-15 minutes.
In other words, I can't see the value of continuing the email bomb. Any ideas?
You receive 4k emails to your GMAIL a day? All spam? Either something is broken or they found a way around the filter…