- Zendesk spam campaign persists despite new security features
- Attackers abuse support ticket confirmations to flood inboxes with strange, non-malicious emails.
- Suspected DoS attack overwhelms Zendesk systems; company admits additional protections are needed
It seems that the new security features introduced by Zendesk to combat spam are not working, as the strange spam campaign continues to this day.
BeepComputer reported users are once again bombarded with dozens, if not hundreds, of automated emails sent through various companies’ insecure Zendesk support systems.
All the emails are just weird: weird subject lines, weird content. They do not contain malware or links to phishing pages. Some people believe this is actually a denial of service (DoS) attack against Zendesk, which makes sense: if the company’s servers are overloaded and sending fake emails, they can’t send legitimate ones.
Take steps to resolve the problem
“Someone DDoSing Zendesk is supporting ticketing systems and other account creation processes on the Internet with my email right now. Anyone know what the attacker is hoping to achieve here?” one user posted.
Zendesk is a customer service and support software platform that helps businesses manage communication with their customers. Among its features is the ability to allow unverified users to submit support tickets which, when this happens, automatically generates a confirmation email and sends it to the email entered by the user.
The attacks were first spotted in late January 2026, when hackers scoured huge lists of email addresses and created countless fake support tickets, turning Zendesk’s features into a massive spam tool. Since the emails come from a legitimate Zendesk system, they pass most spam filters and land directly in users’ inboxes.
At the time, the company told media that it had tackled the problem by introducing new safety features.
“We’ve introduced new security features to combat relay spam, including improved monitoring and limits designed to detect unusual activity and stop it more quickly,” the company said. “We want to assure everyone that we are actively taking steps – and continually improving – to protect our platform and our users.”
It looks like Zendesk needs to take even more action.
The best antivirus for every budget
Follow TechRadar on Google News And add us as your favorite source to get our news, reviews and expert opinions in your feeds. Make sure to click the Follow button!
And of course you can too follow TechRadar on TikTok for news, reviews, unboxings in video form and receive regular updates from us on WhatsApp Also.
