Unverified50% confidenceEventExact time
An MCP server created by community developers based on the Postmark email API added the BCC fan@giftshop.club in version 1.0.0.16, causing every email to be copied to the attacker's mailbox.
1
Sources
50%
Confidence
Long-term
Relevance
10/22/2026
First Seen
Sources
Related Entities
Related Claims
Unverified安全研究人员发现一个恶意MCP服务器伪装成正规邮件转发服务Postmark MCP，实际会在每封邮件密送一份给攻击者73% similarUnverifiedFanvue has its own official MCP server that can reply to fans, pull data and manage posts; but as far as Smart Post Studio knows, Smart Post Studio is the only multi-platform scheduler whose MCP server can reach Fanvue.69% similarUnverifiedMaildun has a built-in MCP server that supports coding agents such as Claude Code, Codex, or Cursor to directly create and edit emails.60% similarVerifiedMCP supports progress notification and log feedback mechanisms, allowing an MCP Server to proactively return execution progress and real-time logs to the client during tool execution.60% similarUnverifiedMCP connectors largely exist as community-driven open-source projects, lacking unified security review and signed distribution mechanisms.59% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1085478API
curl https://kongchang.com/api/v1/knowledge/claims/1085478MCP
get_claim(id=1085478)