At approximately 8AM GMT+3, a malicious user affected clients of target, using the automatic forwarding of incoming email replies feature within Track.

The feature automatically sends an email to respondent(s) when an email reply is detected, and the malicious user managed to bypass various validations using a work-around to setup our case emails to be respondents, along with the clients of target.

As a result, the malicious user was able to setup an exponentially growing, infinite loop that would spam clients of target, containing profane messages.

We have immediately disabled the automatic forwarding feature for incoming email replies, and have removed all remaining 7000+ in queue. We have observed that this exploit is no longer occurring, or reproducible, and have marked the issue resolved after 6+ hours of monitoring.

Proto sincerely apologizes for any clients affected by this negative impact.
We will re-enable this feature once a robust solution has been implemented by the engineering team.