Questions tagged [email]
Related to email protocols, clients, servers, content, and message format.
0
votes
0answers
22 views
Block/spam an email that doesn't match a rule
Is there anything we can put in place such to verify that if the sender's name = "John Doe" and the domain is not company.org (or legitimate verified SPF sender), then the message is marked as spam or ...
1
vote
2answers
150 views
Why would an attacker try SMTP login many times even though it is disabled?
I recently set up an SMTP server for myself to use, and I am getting some traffic from two IP addresses and none else (though for obvious reasons I will not state the addresses here).
An example ...
25
votes
2answers
4k views
Email from a hacker with my password [duplicate]
I have received an email from a hacker saying he got my email account password.
The password showed in the mail is not my account password but is a password I use sometimes.
I checked haveibeenpwned ...
1
vote
1answer
57 views
Recover SHA1-encoded email addresses
Say you have a list of SHA1 hashes which are all encoded with the same salt. All of these are email addresses and you know at least one combination of hash and email address.
Is it possible to use a ...
1
vote
0answers
48 views
Compromise Google GSuite by buying expired domain
I saw a question a few days ago that talked about if a domain is bought by someone else then would the emails to that domain be compromised. And it got me thinking about google gsuite and specifically ...
1
vote
3answers
108 views
Can I get 2FA for my private domain e-mail account? [closed]
Is it possible to somehow get 2FA for my e-mail accounts even if they're hosted on custom / private domains? (e.g mymail@mycooldomain.com and not gmail)
1
vote
1answer
62 views
Strange phishing email
I received a strange phishing email the other day that seemed to use span tags to encode "hidden" values within the email's body:
<meta http-equiv="Content-Type" content="text/html; charset=utf-8"&...
99
votes
8answers
20k views
Can someone read my E-Mail if I lose ownership of my domain?
Let's assume I have a server set up with an email address like me@mydomain.tld. Now I have distributed my business card with the e-mail address to all people all over the world and they keep sending ...
1
vote
3answers
182 views
How hard is it to suspend and track a twitter account seeking ransom from govt. organizations?
Am asking in reference to this Twitter account - DarkOverlord .
It threatened to post decryption keys, for the documents pasted on pastebin (archived), and few minutes ago it did post them.
Couldn'...
0
votes
1answer
54 views
Simple Mail Delivery Protocol (SMDP), where is it today? what do you think of it?
So I'm doing a research study on Simple Mail Delivery Protocol (SMDP)
for those of you who don't know what it is, it's a new protocol for Email delivery that promises complete anti-spam filtering.
...
0
votes
0answers
33 views
How did this “hacker” make it look like I sent the email to myself? [duplicate]
So I went through my junk today as I wasn't receiving a sign up email from a service I signed up to. Looking through and another email caught my eye. The email looks like it has come from my own ...
3
votes
3answers
148 views
Is receiving an OTP via email any more secure than receiving it via SMS?
I understand that getting OTPs via email and SMS are the weakest forms of 2FA, but given a situation where these two are the only options for 2FA, is email any better than SMS?
(Assuming the email - ...
0
votes
2answers
114 views
How secure is it to send credit card information partially over email and text?
I need to pass credit card information for a travel reservation, and I am thinking of splitting it over email and text. The credit card number itself would be send over text, while expiration date and ...
-1
votes
1answer
107 views
Can we infect our system by opening a email with outlook 2016?
I read that it is possible to get a virus just by opening a mail (not even clicking at any links on it or opening the attachments), because scripts can be attached to it.
Is this also true for ...
-1
votes
0answers
54 views
Was this some novel attack by email?
I'm almost sure I'm being paranoid here, but better safe than sorry, right?
My gmail account received an email about a rebooked flight, sent by some Hong Kong air carrier I never heard about. My ...
0
votes
1answer
79 views
Suspicious email! “Data removal request”
Please help me. I’m really scared about this and I don’t know what to do. I’ve never gotten this kind of email and I was stupid and replied.
1
vote
1answer
38 views
Forcepoint secure email
I just got an email from a financial institution in answer to a question I raised with them. It came in the form of a "secure email" from Forcepoint, which requires you to open an HTML document and ...
0
votes
2answers
84 views
Can just receiving or opening a spam email put my computer or emails data at risk?
Sometimes you receive some emails which are mostly (and correctly) categorized as spam email by your email provider and you are almost sure that they are in fact spams. However, you are curious to ...
1
vote
2answers
125 views
Why are email clients prevented from seeing the envelope?
Being able to compare the envelope values against the header field values is potentially useful for detecting fraudulent (e.g. spoofed) mail.
However, email servers, when receiving mail over SMTP, ...
0
votes
2answers
94 views
Find the person behind an email address using its recovery email in Gmail
Note: This is based on a true story!
The Story:
Alice and Bob are good friends and each one knows the personal email address of the other person and they contact with each other using it. Let's ...
0
votes
1answer
73 views
How do SEO scams work?
Lately, I've been getting emails for my work email address from SEO scammers. Some examples look like this:
Hi,
Hope you are doing well there!
Would you like to increase the traffic of your website?
...
0
votes
2answers
51 views
Running open relay smtp in company network
We are producing IoT gateways which send out emails via SMTP protocol for user notifications. These IoT gateways are mainly used by corporate customers in intranets without access to or from the ...
0
votes
1answer
51 views
Should I reply to e-mails that reached me by mistake (very low chance of being regular spam)?
My name is fairly usual where I live and my e-mail address is {first_name}.{last_name}@very_large_provider.com, so from time to time I receive what is very probably legitimate e-mails sent to me by ...
1
vote
2answers
127 views
What are the security implications of losing a paper calendar?
Assuming I have a paper calendar (organizer) with the following information on it:
dates/locations where I have been and where I'm planning to go
phone numbers and e-mail addresses of a few people
my ...
-1
votes
1answer
51 views
Check emails are genuine [closed]
unitedstatescustoms66@gmail.com tescoextrashippingcompany147@gmail.com
I have received messages from the email letting me know about luggages and parcel being sent a soldier whom I have been talking ...
0
votes
1answer
119 views
Peculiar Japanese DNS arrangement
I have been receiving spam emails on my many mails but specifically gmail from a .jp domain. I deleted the emails but today I decided to actually read one of those emails to see if they can send me my ...
53
votes
2answers
10k views
How do US government agencies open their email attachments?
I suppose the FBI receives email with attachments, like any other government agency: documents, resumes/CVs, etc. I also suppose they are very careful not to get infected, more than the average user, ...
3
votes
1answer
176 views
How do I make safe login-emails? (GET/POST) [duplicate]
Vision
I envision a login/signup-system, where the user enters his/her email, and receives an email with a link to sign in. The user clicks the link, and is automatically signed in (confirming the ...
0
votes
0answers
38 views
Security risks when using an encrypted container to share messages
If I use VeraCrypt and create a container with a strong 64 character password and key files stored on a USB that's locked away, using the container, can I securely send e-mail?
I'm aware I could use ...
1
vote
3answers
71 views
Would Gmail server be able to protect me from phishing attacks if I'm using a stock email app on Android?
I have a Gmail account and I am using Samsung email app. Recently I have switched to the Gmail app because I thought using the Gmail app would be safer because that app would automatically filter ...
1
vote
0answers
124 views
Breach of HTTPS shared server URLs sent through secure email
I host some simple services for my own use on a commercial shared hosting server. These URLs are cryptic and not easily guessed, and the query strings tend to be long and cryptic. The web services are ...
1
vote
6answers
1k views
I am receiving weird emails regarding GDPR from electronicprivacy.eu
Since a week, I am getting some French emails. Since I don't know French I used google translate to know what is this about:
Email 1:
Bonjour,
En application de mon droits d’accès et d’...
2
votes
1answer
74 views
What are Outlook's safe links? [closed]
People using outlook.com as their mailbox may know this: If you receive an e-mail with a web link in it and copy the link with "right-click + copy link location" you will receive an outlook protection ...
2
votes
1answer
42 views
Should user be authorized in site after following email change confirmation URL?
When users triggers email change, we send a link to their new email address.
If user follows the link, should we only proceed with email change after authorization (being logged in the site), or we ...
61
votes
6answers
10k views
What should a verification email consist of?
Right now I'm generating a 25 character string stored in the database that can only have a 1 time use and expires 30 minutes after user registration.
http://example.com/security/activate/...
1
vote
2answers
50 views
Are there security pitfalls on relying on an emails domain to automatically assign permissions?
I'm working in a new clients system, and they automatically assign permissions based on the domain name for the email address the account was created under (they do require validation via an email).
...
1
vote
1answer
47 views
Does PGP encrypt all messages or only that one send with PGP?
If I encrypt my Email with PGP will all of my emails will be encrypted or only that ones that people send to me using my PGP key?
If I register on Facebook or Dropbox and they send me an email: "...
2
votes
0answers
40 views
Search function in Outlook and attachements
I am wondering how the search function of Outlook is working, especially in regards to researching key words that are presents in emails attachements. Does the Outlook search function opens the files ...
1
vote
1answer
60 views
How to avoid man in the middle attacks when sending sensible info via email?
I'm setting up a website where users can buy cupons. I should send coupons codes to customers via email and these codes are enough to use the coupon. How can I avoid man in the middle attacks? Do you ...
2
votes
2answers
141 views
How to harvest plaintext passwords from emails
Do you have any links to stories from a reputable source about any malware that harvests plaintext passwords from emails?
I do tech support and every once in a while one of my clients will send me ...
-2
votes
3answers
105 views
Two different IPV4 inside outlook email header
I am currently analysing an outlook email header.
I am very confused because it has two ipv4 addresses x-originating from different locations. Usually there is an ipv4 towards the top of the header ...
16
votes
2answers
3k views
Why is some meta data not encrypted in Proton Mail?
In a different Question, in the first answer is written that some meta data doesn't get encrypted.
What you shouldn't forget about encrypted e-mail, is that while the message body is properly ...
0
votes
2answers
120 views
Check reputation of specific email address [closed]
I know that it's possible to check the reputation of email address domains, but what does the security community use to find information on the reputation of specific email addresseses?
List of ways ...
1
vote
3answers
348 views
Is this a phishing email?
I've just received the strangest email:
I don't understand why anyone would send an email like this. It doesn't look to be asking for credentials of any kind. Is this a scam which is designed for ...
0
votes
6answers
302 views
Secure way of sending a excel document to a third party?
Looking to send an excel log file to a third party securely, any sensitive data will be obfuscated.
Initially was looking to use PGP but the third party does not have this and time is a constraint.
...
2
votes
1answer
813 views
Is Mailbait still a threat?
Is Mailbait (or similar services) still a threat, was it ever a threat, and if so how can it be mitigated?
Mailbait is that service that promises to fill up your email inbox by sending you a huge ...
6
votes
4answers
342 views
How to leak an email without revealing my identity?
I'm a faculty member at a university and I want to leak to students an email sent between the administration and faculty members concerning ethical transgressions against the student body as a whole.
...
0
votes
2answers
72 views
Spoofed email has appropriate alias but unknown email
My wife received a suspicious email where the "FROM" field contained my name, but the email appeared to be delivered from an E-Mail address that we do not recognize.
The fact that the email used my ...
3
votes
2answers
575 views
What to do about email threats containing leaked passwords?
A few days ago I got an email from a hacker supposedly using an email of mine (he was using the same email address TO and FROM) from my own email domain, and had a part of a password I use to purchase ...
31
votes
1answer
8k views
Is it possible to fake 'received' field in the e-mail?
I've received some strange e-mail recently. The e-mail has different From and Reply-To fields. It has also To set to Undisclosed recipients but it's not crucial.
At first I thought it's fake, but ...
