Internet Message Access Protocol (IMAP): 143

Security Weaknesses:

• Plaintext communication (if not secured) allows interception.

• Vulnerable to brute force and credential stuffing attacks.

• Susceptible to DoS and command injection attacks.

Security Defense and Mitigation Measures:

• Require IMAPS (port 993) with TLS encryption.

• Implement rate-limiting to mitigate brute force attacks.

• Use multi-factor authentication (MFA) for email accounts.

Indicators of Compromise or Attack:

• Repeated login failures or suspicious access patterns.

• Unusual activity in IMAP server logs.

• Compromised email accounts or unauthorized access.