Questions tagged [email]
Related to email protocols, clients, servers, content, and message format.
0
votes
1answer
47 views
TLS downgrade attacks
I'm currently looking at e-mail security and wondered whether server to server e-mail communication that enforces TLS, will prevent the risk of TLS downgrade attacks?
-1
votes
0answers
54 views
Using Hashcash to stop spam bots [on hold]
I have heard about hashcash, but a lot of information about using this in email registration. The idea is that the client registering must calculate a hash, and this wastes resources and time for ...
26
votes
5answers
8k views
How could a scammer know the apps on my phone / iTunes account?
I received an email with the subject "Your invoice from Apple #xxxxx".
It then continues by: "[...] your payment from "Pokemon Go was accepted [...]". That line made me sceptical. I just downloaded ...
0
votes
2answers
94 views
Opened a phising email on school email
Hello I opened this email sent to my school email and I realized it was a phising email.
And now my OCD and anxiety are going haywire. Is it possible I got infected? I did not click on any links. I ...
0
votes
1answer
108 views
This email looks very dodgy, but can't figure on what's going on [closed]
Please see the screenshot attached.
A colleague sent me an email asking me to add something to our website. Her email was forwarding a PDF that she, in turn, received from someone else.
The thing ...
0
votes
1answer
120 views
Are my emails being hacked?
I receive a lot of emails from the Mailer Deamon. It says that it could not deliver a message I tried to send. But I did not try to send anything.
I have an email address that is forwarded to another ...
1
vote
1answer
98 views
Why are my emails going to spam?
I have been trying to learn about phishing emails. I have read up quite a bit on it. I setup a domain somthing.tk (free domain), hosted a website on a VPS (Digital Ocean). Set up my own mail transfer ...
1
vote
1answer
63 views
Prevent spammers from faking emails being sent from you to someone else or yourself?
I received the following email with the headers below. How are the spammers exploiting this method of tricking users that their account is hacked?
How can one prevent spammers from doing this with ...
-1
votes
1answer
104 views
I received harassing emails and I want to know who sent them [duplicate]
I am not a tech-savvy person, although I do find it fascinating and have tried to become cyber-savvy today. I received three emails today that were vaguely harassing, and I think I have an idea of ...
0
votes
0answers
55 views
Friend got a spam mail with my name and location, after a google drive invite
Right after I sent an invite to a shared drive folder to said friends email adress, she received a spam mail featuring my name (the name I got on google account and my location (city). How does this ...
113
votes
5answers
17k views
Why do phishing e-mails use faked e-mail addresses instead of the real one?
I read that you can write anything into the From: field of an e-mail.
If that is true, then why are phishing e-mails trying to trick me with look-a-like addresses like service@amaz0n.com instead of ...
0
votes
1answer
84 views
Email Policy Question - Unsure what to be looking at
I'm a bit unsure how to answer this question. I've looked online however I'm unsure if I'm answering the right way.
Your organisation has an e-mail server that processes sensitive emails
from ...
1
vote
2answers
52 views
How can I use Message-ID in header to screen (filter) Emails?
Recently started receiving torrent of spam emails immediately after ISP (Charter-Spectrum) switched to an upgraded Email system. Five of my ISP email addresses getting the same spam every day. Some ...
0
votes
2answers
64 views
DMARC on ProtonMail custom domain
I began using ProtonMail email service, I like it that much, that I connected my domain yesterday and did appropriate changes to DNS.
This page of ProtonMail's knowledgebase says how DMARC shall be ...
0
votes
1answer
77 views
Customer Email Hacked, Subject line “smtp-mail.outlook.com,587,<email>,<password>” [closed]
We've had someone break into our email mailbox - They have sent out spam to in an automated fashion. The only clues is that there is a sent email a few days before with a subject line of
"smtp-mail....
2
votes
1answer
129 views
Finding out if a series of job emails from the same person are a scam or a way of tracking/phishing?
I'm Indian, and have received a third job email from a Canadian "Co-founder and COO". I'm not even actively job searching.
He hasn't mentioned how he got my mail id or why I'm the right fit
for the ...
2
votes
2answers
228 views
What to do about company that sent my password information in plaintext?
I make monthly payments to a website/company who insecurely stores my information. These are in the form of loan payments, so I don't know if I can change who I pay to.
I asked for login assistance ...
0
votes
0answers
41 views
Database in DMZ and SMTP relay
I have an application that talks with a database in the DMZ. There is a firewall between the apps and the db but our developer thought that they require a mail notification that is triggered from the ...
2
votes
1answer
138 views
Why would a scammer ask for creation of a new email account?
I recently received the following email:
Good day my dear friend,
I am contacting you to help get the deposit (£8.5 million pounds), my late
client Engineer Alexander left in his Bank before ...
1
vote
0answers
55 views
Digital Signature is not valid
I recently received a digital signed email from a friend and the certificate is issued by COMODO RSA Client Authentication and Secure Email. My problem is the thunderbird detect it as a "Not Valid ...
3
votes
2answers
149 views
I received an encrypted email attachment as a reply to a previous conversation, months later
As in the title - I received an email reply to a months old thread containing a password protected zip file. I had previously asked them for a particular CAD file, but this was months ago and we had ...
0
votes
2answers
112 views
Sensitive data transmission over Internet
I was wondering how we should transfer our sensitive data (identity card softcopy, plaintext-password, secret documents, etc) over the internet securely, the following are a few related questions:
Is ...
0
votes
1answer
112 views
Search list of emails [HaveIBeenPwned] [closed]
I want to search a list of emails, about 150 roughly on the https://haveibeenpwned.com/
website.
Obviously, I do not want to search each address individually, is there a way to upload a list, or ...
1
vote
2answers
82 views
How are SPF records used in practice?
I always thought that receiving email servers check the "from" domain's SPF record to verify that the sending server is allowed to send email. For example, if I sent email from "atte@atte.com", the ...
3
votes
3answers
419 views
What is the point of spam mails containing nothing but random letters?
I recently started replying to spam (as proposed by James Veitch), logged into an old email account and noticed (much to my delight!) a couple of hundred spam mails. Oddly enough I stumbled upon an ...
1
vote
1answer
184 views
How would google know someone has the password for my web host email?
I received a confusing email from Google today. It had the subject 'Critical security alert' and the body said in part 'Google has become aware that someone else knows your password, and we've taken ...
1
vote
1answer
430 views
'Critical security alert for your linked Google Account ' but I don't recognize the account
I received an email entitled : 'Critical security alert for your linked Google Account' .. The body says:
Someone knows the password to your linked Google Account
----------@gmail.com
...
0
votes
0answers
47 views
Email really sent or not? [duplicate]
My boss is saying that the emails I received from work are fraudulent, fake. Is there a way to verify if the emails were ever sent in the first place.
2
votes
1answer
88 views
Does searching for my info expose my info?
My bank does a 'dark web' search on my email address to see if it's out there. It occurred to me that they might be putting my email address on the dark web by searching for it.
What stops the ...
1
vote
2answers
77 views
How can you use the information from Gmail's “Show Original” feature to check if an email really came from Google?
I received an email saying that someone logged into my Gmail account from an unknown device. How can I verify that this email (security alert) actually came from Google and not from a malicious source?...
-1
votes
3answers
123 views
Is it sufficient for the sender of an email to be on a VPN, or must both sender and receiver use a VPN?
I want to send an email to another user with the contents encrypted. Do both of us use a VPN to have the email be fully private? Or is it enough for only one user to be on a VPN. If both, then do both ...
1
vote
0answers
19 views
If my mail domain admin can check my activity through google business when I was logged in can I avoid them to do so by using a mail client? [closed]
I think it's secure to use log-in through a mail client like mail-spring.I think in this way we have separated the account just for mail.Can they still track my google search history.If anyone can ...
1
vote
1answer
75 views
Probing Unsubscribe Link Vulnerabilities [closed]
I'm interested in testing the security of 'Unsubscribe' links embedded in emails sent to customers by large companies. I'm targeting companies participating in a certain bug bounty program, and my ...
0
votes
0answers
30 views
Block/spam an email that doesn't match a rule
Is there anything we can put in place such to verify that if the sender's name = "John Doe" and the domain is not company.org (or legitimate verified SPF sender), then the message is marked as spam or ...
1
vote
2answers
162 views
Why would an attacker try SMTP login many times even though it is disabled?
I recently set up an SMTP server for myself to use, and I am getting some traffic from two IP addresses and none else (though for obvious reasons I will not state the addresses here).
An example ...
26
votes
2answers
5k views
Email from a hacker with my password [duplicate]
I have received an email from a hacker saying he got my email account password.
The password showed in the mail is not my account password but is a password I use sometimes.
I checked haveibeenpwned ...
1
vote
1answer
60 views
Recover SHA1-encoded email addresses
Say you have a list of SHA1 hashes which are all encoded with the same salt. All of these are email addresses and you know at least one combination of hash and email address.
Is it possible to use a ...
1
vote
0answers
54 views
Compromise Google GSuite by buying expired domain
I saw a question a few days ago that talked about if a domain is bought by someone else then would the emails to that domain be compromised. And it got me thinking about google gsuite and specifically ...
1
vote
3answers
122 views
Can I get 2FA for my private domain e-mail account? [closed]
Is it possible to somehow get 2FA for my e-mail accounts even if they're hosted on custom / private domains? (e.g mymail@mycooldomain.com and not gmail)
1
vote
1answer
74 views
Strange phishing email
I received a strange phishing email the other day that seemed to use span tags to encode "hidden" values within the email's body:
<meta http-equiv="Content-Type" content="text/html; charset=utf-8"&...
100
votes
8answers
20k views
Can someone read my E-Mail if I lose ownership of my domain?
Let's assume I have a server set up with an email address like me@mydomain.tld. Now I have distributed my business card with the e-mail address to all people all over the world and they keep sending ...
1
vote
3answers
196 views
How hard is it to suspend and track a twitter account seeking ransom from govt. organizations?
Am asking in reference to this Twitter account - DarkOverlord .
It threatened to post decryption keys, for the documents pasted on pastebin (archived), and few minutes ago it did post them.
Couldn'...
0
votes
1answer
60 views
Simple Mail Delivery Protocol (SMDP), where is it today? what do you think of it?
So I'm doing a research study on Simple Mail Delivery Protocol (SMDP)
for those of you who don't know what it is, it's a new protocol for Email delivery that promises complete anti-spam filtering.
...
0
votes
0answers
42 views
How did this “hacker” make it look like I sent the email to myself? [duplicate]
So I went through my junk today as I wasn't receiving a sign up email from a service I signed up to. Looking through and another email caught my eye. The email looks like it has come from my own ...
4
votes
3answers
215 views
Is receiving an OTP via email any more secure than receiving it via SMS?
I understand that getting OTPs via email and SMS are the weakest forms of 2FA, but given a situation where these two are the only options for 2FA, is email any better than SMS?
(Assuming the email - ...
0
votes
2answers
132 views
How secure is it to send credit card information partially over email and text?
I need to pass credit card information for a travel reservation, and I am thinking of splitting it over email and text. The credit card number itself would be send over text, while expiration date and ...
-1
votes
1answer
109 views
Can we infect our system by opening a email with outlook 2016?
I read that it is possible to get a virus just by opening a mail (not even clicking at any links on it or opening the attachments), because scripts can be attached to it.
Is this also true for ...
0
votes
1answer
81 views
Suspicious email! “Data removal request”
Please help me. I’m really scared about this and I don’t know what to do. I’ve never gotten this kind of email and I was stupid and replied.
1
vote
2answers
59 views
Forcepoint secure email
I just got an email from a financial institution in answer to a question I raised with them. It came in the form of a "secure email" from Forcepoint, which requires you to open an HTML document and ...
0
votes
2answers
101 views
Can just receiving or opening a spam email put my computer or emails data at risk?
Sometimes you receive some emails which are mostly (and correctly) categorized as spam email by your email provider and you are almost sure that they are in fact spams. However, you are curious to ...
