Security News > 2021 > March > Slack now lets you DM people outside your company

Slack now lets you DM people outside your company
2021-03-24 16:03

Slack has enabled a new 'Slack Connect' feature that allows users to send messages or create shared channels with people outside of their organization.

While users had previously been able to test the Slack Connect feature, it has begun to roll out to all paid workspaces today.

"Slack Connect is a new way for organizations to drive business forward and communicate with their customers, partners and vendors as quickly and easily as they interact with their coworkers in Slack," Slack stated in an announcement.

As quickly as the Slack Connect feature launched, Slack has already disabled the optional message to be included in invites as it can be abused for phishing and abusive messages.

Send invite with nasty language- slack emails you w/ the full content of the invite- can't block the emails because they come from a generic slack address that informs you of invites- abuser can keep inviting w/ abusive language https://t.

While Slack admins can disable Slack Connect and prevent their users from accepting invites, users will still receive the invite emails unless they are filtered on their mail server.


News URL

https://www.bleepingcomputer.com/news/software/slack-now-lets-you-dm-people-outside-your-company/