Questions tagged [email]
Related to email protocols, clients, servers, content, and message format.
0
votes
0answers
24 views
What is an .nrml file extension? [on hold]
I signed up at what I thought was a legit website and the confirmation email said I should verify by clicking a link like this:
http://justdropped.com/next.cgi?file=verify.nrml
Which I thought was ...
-2
votes
0answers
44 views
URL injection in email content
I am testing a billing website in which I am able to enter an arbitrary URL in the name and address fields. There is no input validation. The bill or invoice email sent to the user has the entered URL ...
1
vote
1answer
77 views
Disturbing Notification
I received an E-mail notification a couple of days ago welcoming me for signing onto Stockholm Arlanda Airport's wifi network. My wife and I have never been to Stockholm. I asked my neice's husband ...
2
votes
0answers
64 views
How this tracking (and more) was done using an image in an email?
As reported in the NY Times, there was some type of electronic spying in a high-profile military trial. Its claimed that the prosecutors were spying on the defense:
The court-martial ... has been ...
0
votes
1answer
37 views
DMARC “policy_evaluated” is “fail” for SPF, even when SPF domain alignment is “relaxed”?
A DMARC aggregate report which I received reads (irrelevant pieces removed, domains changed):
<record>
<row>
<policy_evaluated>
<disposition>none</...
0
votes
0answers
55 views
How do hackers keep their phishing url undetected? [closed]
Most hackers keep their links undetected and also up for a long time and send phishing messages.
How is it done? Even Outlook server could not detect them.
0
votes
0answers
38 views
Prove a received mail came from a company email when company is tampering on their side
X works for EvilCorp and he sends a whistleblowing email to HR. HR responds with "we will look into it". But management takes advantage of having control over X's PC and all email addresses and ...
0
votes
1answer
119 views
Probable hack: email “from” names being corrupted
Something very weird and troubling started happening on my wife's Gmail account today. She received an email from G. Arnold, who is a regular correspondent, but in her inbox it showed as being from "...
1
vote
1answer
114 views
Phising test failed e-mail to my personal account, how does this scam work?
I've recently gotten a pair of "User Selkie has failed the phishing test" emails to my personal account. The email has no other information, no links or anything, and while I'm not going to respond to ...
84
votes
5answers
18k views
Why would someone open a Netflix account using my Gmail address?
This is something that happened to me a few months ago. I don't know if it is a hack attempt, although I can't think of any way that there could be any danger or any personal information gained.
I ...
1
vote
1answer
56 views
What is the reason for DMARC spec to not require specifically SPF or DKIM pass?
DMARC produces "pass" result if and only if at least one of SPF and DKIM checks pass. It has been noted that DKIM provides stronger protection of the two (if implemented properly). But, in order to ...
1
vote
0answers
24 views
Were PGP/MIME and PGP/Inline equally affected by EFAIL?
I saw this question about which out of those two protocols is more secure. The question was from 2016, but Efail was discovered late 2017. I understand that some email programs were affected while ...
0
votes
1answer
44 views
Soft-fail vs Hard-fail SPF + Monitor vs Reject+Strict DMARC, could it be counterproductive?
I have a ProtonMail premium plan with one custom domain and a single email address. My domain DNS is protected with DNSSEC.
What caught my eye were two things they recommended in the domain setup:
...
0
votes
2answers
90 views
Do spammers use legitimate email marketing companies?
Every so often I will find myself on a mailing list that I know I didn't sign up for. This always gets me very cautious and I treat the junk mail as hostile spam - don't click, just delete and ignore. ...
0
votes
2answers
76 views
ML approach to malicious attachments using email contents
Based on my understanding of the field, it seems like there is a lot of attention paid to spam filtering based on the contents and metadata of an email, and there is considerable attention paid to ...
1
vote
1answer
71 views
What accounts for file accessed immediately after including link in Gmail?
Less than 60 seconds after sending an email w/ Gmail that contained a pasted https link to a .zip file, that file was accessed by two non-Google servers. Neither server belongs to the email recipient. ...
21
votes
7answers
8k views
Unexpected email from Yorkshire Bank
I have started receiving unexpected emails from Yorkshire Bank.
I have never been a customer. I don't recall applying for any of their products either, although maybe I did many years ago.
The ...
0
votes
1answer
189 views
Received ransom email containing my password. How did they get my password?
Finally, even I got the fabled ransomware emails we've all heard about so much.
First, let's look at the facts before I get to my question:
I use Mozilla Thunderbird as my email client.
I was ...
-2
votes
1answer
168 views
Email not considered a secure form of communicate for legal / government purposes - why? [duplicate]
Ive seen the below statement on lots of legal and government documents over the years. Im based in the UK, but presume similar statements are made elsewhere.
[In relation to communicating with ...
1
vote
2answers
114 views
How to test if TLS is enforced for emails sent through SMTP? [closed]
We are planning to create a rule in Proofpoint to enforce TLS on all outgoing email. I need to test that the rule is working and emails are bouncing if the recipient SMTP server does not support TLS.
...
81
votes
5answers
13k views
Email Account under attack (really) - anything I can do?
Over the last week, there is a constant barrage of authentication failures to my email account from a variety of ip addresses - usually in blocks of exactly 575 attempts.
My password is as strong as ...
3
votes
2answers
127 views
Email verification by sending mail instead of receiving
I have an app whose main purpose is to help people track emails they send.
In most user onboarding, The user is sent a secret URL via email. They validate by clicking a link to return the secret.
...
1
vote
1answer
49 views
Reading the MailWatch interface - 'From' address
We often get emails blocked that have confusing sender addresses. This is always the scenario: a message marked as spam says this in the actual headers: "From: "Bob Jones" some.normal.address@domain....
59
votes
16answers
13k views
Alternative to sending password over mail?
Recently I've started working as a contractor for a company, which requires me to often log in to different b2b services.
The way I receive the login data is usually over email in plain text. My gut ...
1
vote
2answers
79 views
SPF, DKIM and DMARC - How do receiving/recipient mail servers know how and when to validate the mail?
I have spent a bit of time researching SPF, DKIM and DMARC mechanisms however If I understand correctly, these help the recipient to confirm whether the domain is legitimate but only if they have ...
1
vote
0answers
72 views
Authentication: E-mailing security codes vs clickable links
I've noticed a trend in how big companies (Amazon, Skype, and a few others I don't remember in particular) handle e-mail authentication.
Rather than e-mailing clickable links with some single-use ...
-5
votes
1answer
155 views
A safer way to read emails on Android devices
I've been trying to think of a safer way to check the email on an Android device. Android devices are generally very insecure, and therefore they should not be trusted for anything serious. Here are ...
1
vote
2answers
172 views
How to extract intresting data from malicious e-mail header
Premise: I know pretty well how SMTP works, and how to read an e-mail header. I know what all the main fieds mean, but I couldn't know what to look for if I want to know if the mail is kind of ...
0
votes
3answers
115 views
Are email systems like Countermail safe?
I am aware of some of the main competitors in this space, including: Lavabit, Countermail, Fastmail, Proton. But, I don't have enough knowledge to differentiate them. Along the same line, I don't ...
43
votes
8answers
7k views
Is it ever safe to open a suspicious HTML file (e.g. email attachment)?
If I receive an email that has an attachment called something like safe-link.html would it ever be safe to open this file?
Clearly, HTML files may have malicious scripts embedded that could run when ...
24
votes
3answers
13k views
Can I Retrieve Email Addresses from BCC?
How can I unmask the e-mail addresses in a Bcc field when I am just a recipient?
Need very simple, step-by-step instructions for someone who doesn't code. I have received a group e-mail and would ...
0
votes
1answer
69 views
TLS downgrade attacks
I'm currently looking at e-mail security and wondered whether server to server e-mail communication that enforces TLS, will prevent the risk of TLS downgrade attacks?
26
votes
5answers
8k views
How could a scammer know the apps on my phone / iTunes account?
I received an email with the subject "Your invoice from Apple #xxxxx".
It then continues by: "[...] your payment from "Pokemon Go was accepted [...]". That line made me sceptical. I just downloaded ...
0
votes
2answers
104 views
Opened a phising email on school email
Hello I opened this email sent to my school email and I realized it was a phising email.
And now my OCD and anxiety are going haywire. Is it possible I got infected? I did not click on any links. I ...
0
votes
1answer
137 views
Are my emails being hacked?
I receive a lot of emails from the Mailer Deamon. It says that it could not deliver a message I tried to send. But I did not try to send anything.
I have an email address that is forwarded to another ...
2
votes
1answer
122 views
Why are my emails going to spam?
I have been trying to learn about phishing emails. I have read up quite a bit on it. I setup a domain somthing.tk (free domain), hosted a website on a VPS (Digital Ocean). Set up my own mail transfer ...
1
vote
1answer
124 views
Prevent spammers from faking emails being sent from you to someone else or yourself?
I received the following email with the headers below. How are the spammers exploiting this method of tricking users that their account is hacked?
How can one prevent spammers from doing this with ...
-1
votes
1answer
163 views
I received harassing emails and I want to know who sent them [duplicate]
I am not a tech-savvy person, although I do find it fascinating and have tried to become cyber-savvy today. I received three emails today that were vaguely harassing, and I think I have an idea of ...
0
votes
0answers
79 views
Friend got a spam mail with my name and location, after a google drive invite
Right after I sent an invite to a shared drive folder to said friends email adress, she received a spam mail featuring my name (the name I got on google account and my location (city). How does this ...
114
votes
5answers
18k views
Why do phishing e-mails use faked e-mail addresses instead of the real one?
I read that you can write anything into the From: field of an e-mail.
If that is true, then why are phishing e-mails trying to trick me with look-a-like addresses like service@amaz0n.com instead of ...
0
votes
1answer
115 views
Email Policy Question - Unsure what to be looking at
I'm a bit unsure how to answer this question. I've looked online however I'm unsure if I'm answering the right way.
Your organisation has an e-mail server that processes sensitive emails
from ...
1
vote
2answers
87 views
How can I use Message-ID in header to screen (filter) Emails?
Recently started receiving torrent of spam emails immediately after ISP (Charter-Spectrum) switched to an upgraded Email system. Five of my ISP email addresses getting the same spam every day. Some ...
0
votes
2answers
118 views
DMARC on ProtonMail custom domain
I began using ProtonMail email service, I like it that much, that I connected my domain yesterday and did appropriate changes to DNS.
This page of ProtonMail's knowledgebase says how DMARC shall be ...
0
votes
1answer
110 views
Customer Email Hacked, Subject line “smtp-mail.outlook.com,587,<email>,<password>” [closed]
We've had someone break into our email mailbox - They have sent out spam to in an automated fashion. The only clues is that there is a sent email a few days before with a subject line of
"smtp-mail....
2
votes
1answer
161 views
Finding out if a series of job emails from the same person are a scam or a way of tracking/phishing?
I'm Indian, and have received a third job email from a Canadian "Co-founder and COO". I'm not even actively job searching.
He hasn't mentioned how he got my mail id or why I'm the right fit
for the ...
2
votes
2answers
254 views
What to do about company that sent my password information in plaintext?
I make monthly payments to a website/company who insecurely stores my information. These are in the form of loan payments, so I don't know if I can change who I pay to.
I asked for login assistance ...
0
votes
0answers
64 views
Database in DMZ and SMTP relay
I have an application that talks with a database in the DMZ. There is a firewall between the apps and the db but our developer thought that they require a mail notification that is triggered from the ...
2
votes
1answer
175 views
Why would a scammer ask for creation of a new email account?
I recently received the following email:
Good day my dear friend,
I am contacting you to help get the deposit (£8.5 million pounds), my late
client Engineer Alexander left in his Bank before ...
1
vote
0answers
105 views
Digital Signature is not valid
I recently received a digital signed email from a friend and the certificate is issued by COMODO RSA Client Authentication and Secure Email. My problem is the thunderbird detect it as a "Not Valid ...
3
votes
2answers
188 views
I received an encrypted email attachment as a reply to a previous conversation, months later
As in the title - I received an email reply to a months old thread containing a password protected zip file. I had previously asked them for a particular CAD file, but this was months ago and we had ...
