Email spoofing refers to the process of sending fraudulent emails that appears to be from someone that it is not.

learn more… | top users | synonyms

13
votes
3answers
2k views

Somebody is spoofing my email to send spam messages, and I have no idea how to block

Someone is using my Google Apps Email ID to send spam messages and I've received 2000+ undelivered and autorespond emails. I have no idea how to block this because the spammer is also using my email ...
3
votes
2answers
113 views

Why can't my email server automatically identify spoofed addresses?

I get this question from business stakeholders a lot, and I have tried to solve this problem on my own. I have a potential approach, but I want to challenge my assumptions. In my mind, it should be ...
0
votes
0answers
26 views

Is there a way for someone to block an email from reaching its recipient?

I don't know if this can be done with people who can email spoof your contacts but I've been noticing that my emails just aren't getting to where it needs to go. In the same vein, I also don't get ...
0
votes
3answers
73 views

Amateur society - What file type to use in email?

Suppose there is a small, non-profit, organisation; say a church or music society. They want to communicate with members, for example to distribute minutes of meetings. The members are have varying ...
8
votes
1answer
105 views

Got a spam mail with an htm attachment, is the script harmful?

Today I got an email with an htm attachment, the mth contains the below code: <html> <head> <script> var url = "" window.location.href= url; ...
-3
votes
2answers
46 views

Faking email domain names [duplicate]

My organisation uses the following domain name '@organisation.org.au' to specify emails that have originated from within the organisation. Is it possible to use an online tool to create a fake email ...
-1
votes
1answer
68 views

“FROM” mail spoofing [duplicate]

I just received a mail from my boss saying someone with my mail has send some request for money. I is kinda serious and I know it is easy to spoof a mail, but the mail is myname@mycompany.com. So my ...
3
votes
3answers
273 views

I'm getting spam e-mail…from myself?

I noticed yesterday that I had received spam e-mail, but my own e-mail address was listed as the sender. Naturally, I changed my password. This is probably a spoof, but I don't know enough about ...
1
vote
1answer
120 views

how to track IP address from which mail has been sent?

I am from India. I have get few mails from some random Gmail ID. How to get the information from which IP address it has been sent ?
-1
votes
1answer
61 views

Server is Sending Spam

I have determined that my server is compromised because it is sending spam (from one of my legitimate addresses). How can I determine what's compromised? Does the attacker know my SSH password? ...
0
votes
1answer
127 views

Correct way of dealing with spam via impersonation

I've been having a recurring problem at work: My boss's contacts keep receiving emails with links sent by a fake adress. The adress always has my boss's name + a different domain name every time. ...
1
vote
1answer
63 views

Is it possible to forge email info in header?

I recently received an email from a guy making me a job offer for a big government company and stating that he works there. However instead of using the domain of the company, he is using GMail. ...
5
votes
1answer
699 views

Gmail may be hacked - bulk spam emails being sent FROM Google apps account

I have a Google Apps email (Gmail with my own domain) - let's call it John@example.com. 3 days ago many people in my address book were sent a spam email FROM my John@example.com account. When I ...
3
votes
3answers
82 views

Site hack with email phishing scam [closed]

We have a small business website that has been compromised. They are somehow getting customers order details and contacting them requesting their credit card details. We have had our web team and a ...
1
vote
2answers
278 views

Using email as individual validation

My company often sends orders to brokers and banks to execute certain actions (like buying x stock or y fund). In order to reduce bureaucracy we are considering send a list of emails that are allowed ...
3
votes
2answers
131 views

Is it appropriate to block a sender's email address

This morning I received a mail from Apple suspension UK <do_not_reply@apple.co.uk> with the subject Apple "Unauthorised transaction alert". The mail was sent to one of my company's distribution ...
2
votes
2answers
93 views

Received email at work from someone using a member's name

The email message looks like this. This person used a church member's name and used a totally different email address. It went like this: Hi! How are you? (then gives a bad web address) ...
6
votes
2answers
849 views

How to prevent abuse of SMTP by sending spam emails?

I'm not an admin, I just created a website, and there's also a mail server on the server I payed for from my hosting provider. Most for what I learnt about mail servers is from an internet tutorials. ...
3
votes
1answer
123 views

How safe is it to use shared SPF record domains?

I'm wondering the following, what if shared SPF records like below are used? v=spf1 include:_spf.google.com ~all v=spf1 include:spf.mandrillapp.com ~all v=spf1 include:servers.mcsv.net ~all Can it ...
1
vote
4answers
290 views

is it easier to eavesdrop on ethernet connection rather than wifi?

I heard someone say that ethernet connection is vulerable if someone can connect to your LAN, and that the traffic isn't encrypted in the way it might be if you're using WPA wifi encryption. Is this ...
2
votes
4answers
207 views

What are some ways to spot email spoof attacks?

I use Gmail and I started getting malicious-sounding emails from people I know intimately. The people I spoke to said they did not send those emails. In order for the attacker to carry this off, are ...
1
vote
1answer
213 views

How spf records prevents the server from attackers?

I have very little knowledge about spf records. I have Googled a little and found that spf records are used to prevent email spoofing. But I dont really understood how this works. I would like to know ...
0
votes
2answers
167 views

Is this a case of simple email spoofing or has my email account been compromised?

I just arrived home and when got to my computer I checked my mail box and it was with a message coming from my own email address that was sent almost at the same time I got home. I promptly ...
0
votes
0answers
260 views

“[!] Something went wrong.. Try again” sendmail with setoolkit in kali behind tor

I've been working in a little project, and the goal right now is spoof an e-mail address. That simple, but doing it in an elegant way. I've done the following, using Kali on a VM (in VirtualBox) I ...
-5
votes
1answer
570 views

Received emails from China Company about my Business name and they want to use it [closed]

Email 1: Dear CEO, (If you are not the person who is in charge of this, please forward this to your CEO, because this is urgent, Thanks) We are a Network Service Company which is the domain name ...
1
vote
0answers
103 views

How should an ISP approach Mutual Auth TLS for SMTP email? (Domain Auth Email)

I'm looking for an easy to deploy way to make email clients (MUAs) display my email messages in a secure manner. PGP and SMIME both do this today, but they are high touch, and require software or ...
0
votes
1answer
78 views

Is a MitM (Man in the Middle) attack by definition an altered or injected communication on an encrypted communication?

If so, what is it called when someone alters or interjects into un-encrypted communications? Is that email spoofing? How is it resolved? End users probably are more concerned with the fast ...
1
vote
1answer
4k views

Email sent to people with my name in the from section, but not my email address [duplicate]

I have had a couple emails sent to people who have sent me an email in the past (in my inbox, but who are not necessarily on my contact list). They have my full name in the from section, and in the ...
0
votes
1answer
716 views

Clicked link on fake email which appeared to be from friend [duplicate]

I receieved an e-mail which at first glance appeared to be from a friend, I clicked on the link provided without thinking as we would often exchance links to sites. The link went nowhere i.e page not ...
7
votes
3answers
14k views

How to Stop Email Spoofing [closed]

Apart from SPF, what else can be done to stop hackers from spoofing your company's email addresses?
1
vote
1answer
195 views

Spam Mail - have someone broke in to my shared hosting account? [duplicate]

Yesterday I noticed that one of my e-mail addresses (the only one within that domain) started to receive a lot of weird messages that the mail haven't reach the target (something like "Sorry, Qmail ...
2
votes
1answer
259 views

Can a hacker use someone else's IP address when running a scam?

I have a friend who works on a ship currently in Accra, Ghana. We do video chats but his system is extremely slow and sluggish. There have been times where our only form of communication is IM. A ...
-3
votes
1answer
99 views

Feedback Form Exploitation possible or not? [closed]

how an attacker can exploit the below provided feedback form in a company website containing the company’s domain? the feedback form does not store data into a database. The server side code only ...
2
votes
3answers
244 views

Email account 'hacked'; do I need to regenerate my server's DKIM _domainkey?

I'm just learning about DMARC (DKIM/SPF), so I apologize if my question doesn't make sense. A few days after I installed a DMARC policy on my server I noticed that the reports from yahoo.com ...
4
votes
2answers
3k views

How can I prevent my E-mail address from being used as the sender for fraudulent/scam messages?

Recently, me and at least one other person I know received an obvious scam E-mail that starts off something like this: We considered your resume to be very attractive and we thought the vacant ...
-5
votes
1answer
246 views

How i can stop already sent email? [closed]

I have a Gmail account. Unfortunately I have sent an email from my Gmail account. How I can stop or back this email ?
0
votes
1answer
1k views

How do botnets deliver spam? [closed]

I can't seem to find the answer to this question. I read that botnet bots are used as email relays (they have smtp servers installed). Wikipedia on Open mail relay: "(...)Internet initiatives to ...
2
votes
2answers
1k views

How to sniff email with https on Windows? [closed]

I am working now on Windows 7 and I want to see if I can sniff an email content on it with Wireshark. So all right with http but with https I can't at this moment and I don't understand how. You ...
0
votes
2answers
189 views

What kind of information can be found from email?

When an average person sees an email, he can see only part of an information enclosed in the mail. To see full information one can look at the source of an email, which shows more. Example of an email ...
1
vote
2answers
237 views

Pionee Red: Is this a Phishing attack? What should we do?

I have just received an email from a close friend, which had "Pionee Red" as the subject, and the following body: you've a new private message from your friend Click To View The Full Message As I ...
0
votes
2answers
71 views

Is it secure to use email to add content to a website?

I have a website running a social network Buddypress. Users leave comments on other users "walls". What I would like to do is to allow users to reply to each other inside the email client, without ...
1
vote
1answer
311 views

What is the mechanism for this user impersonation?

I'm trying to understand how this user impersonation might have taken place. Here's the scenario: Our controller got a call from our bank this morning about a suspicious wire transfer request. After ...
1
vote
1answer
87 views

Is there any security benifit to sent email message only as attachement?

A well known company in Oil and Gas field, sends the email message as PDF attachment, with brief explanation, here is an example: Dear Mr Name, Please review the attached document acknowledging ...
0
votes
1answer
1k views

Email Spoofing Modified Headers

I have be reading more and more about email spoofing and was curious how some things are done. I know in PHP you can simply do mail() and then include "From: spoofsender@provider.com" for example, ...
45
votes
3answers
8k views

Paypal sent an email addressing me with one of my old passwords as my name

I got this email from service@intl.paypal.com, with the title: Your account has been limited until we hear from you. I think this is a scam / spoof email because I don't see any notification in my ...
4
votes
2answers
1k views

How can an email from a Yahoo address be sent through Yahoo without authentication?

I received this bounced email, yet I have a password with 105 bits entropy, my sign in history only shows local sign ins, I do not have any linked accounts nor apps, and I have not been to ...
4
votes
1answer
2k views

Keep receiving delivery failures for emails im not sending

I have my own domain, and a few email addresses on it, including a catch all address, with Google Apps. Recently, my catchall address has been receiving "delivery failure" emails from many different ...
4
votes
1answer
3k views

Email Spoofed. Explain?

So, I think my email id might have gotten hacked. Can some one offer their comments and suggestions on this email ? It seems this email went from my mail id to my friend's email id. The subject is ...