Child Item

Dropbox allows hackers to create an account using your email address to send out phishing emails.

Dropbox allows hackers to create an account using your email address without any form of verification to send out phishing emails. They then lock the account using 2fa preventing the real owner of the email address from getting in to take corrective actions.

Find more posts tagged with

Security

Account Settings

Account Access

Disagree

Under Consideration

Comments

Walter

Hey @BARAKAKI - thanks for posting on our Community.

Can you let us know some additional information about the issue you're having so that we can assist further?

Have you tried contacting our support team about this perhaps or reporting this through this form or emailing abuse@dropbox.com directly?

Keep us posted!

JesGagnon

This just happened to my boss today too. Seems DropBox won’t do anything since they used their own cell number to set it up? Absolutely useless.

Walter

Hey @JesGagnon - sorry to hear about this.

In this case, I'd suggest having your boss contact us directly as this would be the best way for them to get further assistance on this.

Let me know if you have anything else to add or ask in the meantime.

TonyEnglund

Just scrolling around and found this thread, and have noticed this flaw as well.

This isn't a support case per user. There shouldn't ever be possible to create a dropbox account on a mail address you don't own. You can as it is today sign up for a dropbox account and use it without ever prove that you can read the mail account.