Am getting system generated email and SMS text notifications for customer registrations that don't exist in the database. Two in last month from .ru domain.
Running nopCommerce version 3.7 with honeypot enabled and no recaptcha.
1. Is there any security risk here?
2. How are they generating these emails?
3. Is there anything I can/should do to prevent this?
4. Why do this? Are they spamming hoping someone will reply so they can collect email address?
TIA
SWW