All Questions
1,860 questions
-1
votes
0
answers
41
views
Email tracing to actual name [closed]
Wondering if anyone has ever used a cyber company to trace emails and managed to obtain the person behind the emails? I’ve been told they have the capabilities and techniques to try to collect the ...
0
votes
0
answers
42
views
Using "send as" feature with gmail from custom domain not hosted by Google fails SPF and DKIM
I have my personal email address set as a "send as" option on gmail. Let's call it [email protected]. I don't use Google for any services relating to mydomain.com, so I don't have an admin ...
0
votes
0
answers
71
views
2FA and «Sign in from new location» email
If a user configures 2FA, and then he logs in from a new location, should we send an email to inform him that he just signed in from a new location?
Even if it's not common, unnecessary notifications ...
2
votes
1
answer
216
views
Is there a way to "hijack" outgoing email just by just account access?
It's not that explicit of a question, so let me give you some details about a client of mine who happens to be scammed.
An important email arrived with altered content (account numbers) from my client ...
- 123
0
votes
0
answers
44
views
MIME Boundary field meaning & decoding in email header(mail.com web client)
As we know some important information can be found in MIME Boundary field in email headers.
Such as the one described in this interesting link (Dates in Hiding Part 2 — Gmail MIME Boundary Timestamps)
...
- 21
1
vote
0
answers
62
views
What is the meaning and method of decoding the "X-UI-Sender-Class" in email header? [closed]
In an email forensic study, I want to know the meaning of the field "X-UI-Sender-Class" in email header and how can we decode this information.
Note: the email is sent from mail.com Email ...
- 21
1
vote
0
answers
57
views
Please review my (basic) approach to user email verification [closed]
After successful user registration, the session is created via session cookie and the account is marked as unverified.
A universally unique 128 long random string is created using node's crypto (see ...
- 31
5
votes
2
answers
1k
views
How can I defend against this targeted attack on my email, voice mail, and text message inboxes?
Some bot connected my old roommate's name with my contact information. Each day I receive spam from websites related to his interests. One day it's mortgages, the next it's pro-life stuff, the next it'...
- 51
1
vote
0
answers
49
views
Real IP address of the sender [duplicate]
I have a question about sender IP address that is written in email headers.
If we know that this IP is not correct and valid (it means email was sent with using VPN)
Is there any method to find out ...
- 21
3
votes
1
answer
89
views
How to securely change email address in a Mobile App with Email OTP Based Login
I'm working on a mobile app where users can only log in using their email address and receive an OTP to verify their identity. I'm trying to figure out the best approach for allowing users to change ...
- 133
2
votes
1
answer
166
views
How to Fix DKIM Alignment Issues with AWS SES in Lambda Emails to Prevent Spam Filtering?
I am using AWS SES to send emails from a Lambda function with a FROM address of [email protected]. I have configured the following:
Domain Identity: example.com
DKIM Signatures: Using RSA 2048-...
- 21
1
vote
1
answer
56
views
How do junk/spam mails get the "current" timestamp applied?
Whenever I open my email client (Thunderbird), I see some junk mails that have the timestamp of the exact moment, when my client downloaded them via IMAP. So emails with the exact same timestamp of ...
- 1,703
2
votes
1
answer
225
views
Doesn't the recovery number suffer from the same problems as 2-factor authentication by SMS?
I was reading some articles, like this one, about the risks of SMS-based multi-factor authentication and I started to think: doesn't an account recovery number present the same problems? Should I ...
- 21
1
vote
0
answers
48
views
allowing users to check email deliverability without creating spam
In the past year, alot of my customers have either ignored or responded very late to very important emails (many which regard presenting them an offer of a refund for a service not rendered).
So I ...
- 11
1
vote
1
answer
74
views
Circular dependencies in email recovery
My question is about the security of having "circular dependencies" in email recovery. I.e., is option 1:
[email protected] -> [email protected] -> [email protected]
better than option 2:
[email protected] -&...
- 113
7
votes
5
answers
4k
views
Risks of exposing professional email accounts?
I am building out a product that displays user profiles and their professional emails (either company emails like [email protected] or academic emails like @mit.edu). In order to see the user profile and ...
- 204
1
vote
1
answer
150
views
Is receiving login codes you didn't ask for a security concern? [closed]
In the last few days, i received emails from Microsoft with login codes.
AFAIK Microsoft login works without password but with sending those codes to an alternate email.
In this email, Microsoft ...
- 119
26
votes
6
answers
7k
views
Why is much harder to encrypt emails, compared to web pages?
We are all used to reading web pages protected by HTTPS. It has, as far as I (as a user of a browser) can perceive, zero cost. Contrarily, encrypting an email is inconvenient to both sender and ...
- 361
11
votes
3
answers
3k
views
When I attach a sensitive pdf encrypted by Adobe with a password, and send it through Gmail with password included, does it make any difference?
Nowadays, many people would attach a sensitive pdf encrypted by Adobe with a password and send it through Gmail with password included (in the same email or different one).
However, I wonder if this ...
- 211
7
votes
1
answer
2k
views
Securing Transactional Email: User Input Escaping for a email subject
In our ongoing efforts to ensure secure transactional email delivery, we prioritize user input escaping. This practice mitigates potential vulnerabilities like HTML injection attacks.
We leverage the ...
- 171
1
vote
0
answers
39
views
Why can't I receive a confirmaiton email for my registration on a website in Italy? [closed]
I am trying to register for the Italian Museum website so that I can purchase tickets to the Pantheon and other sites. However, to complete my registration the site sends me a confirmation email that ...
- 11
1
vote
0
answers
39
views
In WHM/cPanel > Exim Config, how to prevent SendGrid API key from being breached?
Running a WHM/cPanel system on CentOS v7.9.2009 (STANDARD kvm) and cPanel Version 110.0.34.
We use WHM Exim Config with SendGrid for email forwarding.
In the last 3 months, our SendGrid account has ...
- 111
2
votes
0
answers
74
views
In MS Purview DLP, how do I prevent inline (in body) images when sending Exchange EMail?
In Microsoft Purview DLP (Data Loss Prevention), how do I prevent inline (in body) images when sending Exchange EMail?
My last attempt at a DLP Rule, summary:
Header contains words or phrases: Content-...
- 121
2
votes
1
answer
100
views
What are the risk of using http when capturing open events on an email
I want to configure a custom domain for open and click tracking in Amazon Simple Email Service (SES). However, I've encountered a limitation where Amazon SES only allows HTTPS domains for tracking ...
- 206
0
votes
0
answers
56
views
Best Practices re: changing email address post fraud
Scenario: Successful fraud attempt via phone call. Victim speaks to fraudster and gets tricked into email transfer of funds due to some situation i.e. falsified family emergency (grandson is injured ...
0
votes
1
answer
106
views
Mails in my iCloud mailbox with a foreign mail address as recipient
How is it possible that my iCloud address is not the recipient but has been spoofed in some way?
I don't have any forwarding active and I don't know the sender or recipient addresses.
- 3
0
votes
0
answers
78
views
Locating Spambot
My mail server (IP, not domains) was recently flagged as a spam source by Spamhaus and I'm looking for help at tracking down the source.
First, I verified the forward and reverse DNS records, SPF ...
- 389
33
votes
6
answers
8k
views
Is .txt the only email attachment type that can always be opened without risk?
Is .txt the only email attachment type that can always be opened without risk?
Source of the claim: Training program on phishing at my company
- 463
1
vote
3
answers
265
views
Can my phone got infected if visit my mail inbox without opening any mail attachments?
I've found some articles saying some viruses/malware can attack your device by just opening an email without downloading or opening any attachments.
Is this true?
If yes, how risky for ordinary mail ...
- 11
0
votes
1
answer
292
views
What are forms of "hidden tracking links" in email messages that collect data; activated by simply opening email?
The US Dept of Justice on Monday, March 25, 2024 announced Seven Hackers Associated with Chinese Government Charged with Computer Intrusions Targeting Perceived Critics of China and U.S. Businesses ...
- 1,409
0
votes
1
answer
412
views
Can I use multiple email providers with my website's DKIM, DMARC and SPF?
I'm a software developer, with limited Mail server setup experience, running a little side SAAS on the side where I send emails to my customers. My domain has SPF, DMARC and DKIM setup and I use ...
- 103
2
votes
1
answer
376
views
Does the school have access to email content of my personal email if logged into Chrome with my school account?
I sent an email to somebody with my personal email account (not my school email account). However, when using my personal email, I am doing it with a Chrome browser that I am logged in to using my ...
- 21
0
votes
0
answers
362
views
How can email-tracking services track emails in Google
Some email-tracking services use tracking pixels to detect whether an email was opened. The idea is to add an HTML img tag with an src attribute that links to a 1x1 or 0x0 pixel image to the email ...
- 101
0
votes
0
answers
269
views
What is the correct way to implement a change-of-email request flow?
I am currently implementing a change-of-email request flow for a web service without MFA. My initial approach is to consult the current OWASP Guide for such a flow. In reading the document, I've ...
- 1
0
votes
0
answers
139
views
Is this a safe setup to prevent email account hack?
I would like to protect a Gmail account from being hacked.
Suppose I use the following approach for login/authentication:
Username, Password
2FA via security stick
the stick is in a place that is not ...
- 21
0
votes
1
answer
547
views
How to check e-mail message authenticity? Suspected EML file forging
In a small company, we have an issue suspecting a former employee has forged an e-mail to our company from his Hotmail account by changing its date and recipients in the EML file, claiming that the ...
- 101
1
vote
2
answers
123
views
Is it possible for an attacker to change an email-attachment of a received email client-side and synchronize it via IMAP with Webmailer?
an attacker manipulated the IBAN of an invoice.pdf attached to a received email. The question remains, can said attacker manipulate/change such a pdf client-side and cause an IMAP synchronization with ...
- 11
1
vote
0
answers
113
views
Can an email trace be maliciously removed by an admin on a default Outlook setup?
I'm doing some research into email servers and how they work.
There is a function in Outlook 365 where an admin can perform several traces on emails for the past 90 days. For example, an 'enhanced ...
0
votes
2
answers
173
views
Why spamassasin is doing dns lookup?
I have a server which have configured Amavis and Spamassasin (in default state only). I recently noticed log lines that probably indicate DNS query failure, below is an excerpt:
Nov 21 11:15:40 ...
- 133
0
votes
0
answers
331
views
Guidance: S/MIME Signed Certificate invalid for many clients even though it worked previously and still works
I have a very strange problem and i would like to get some guidance on this.
Problem description:
My application is sending S/MIME signed Email messages to clients. It worked perfectly no problems ...
- 111
0
votes
0
answers
323
views
If only 'two' insecure MFA options are available (email and sms) which is 'most secure'? [duplicate]
Although I disagree with the term MFA entirely if it refers to 'login code send to email', it's a one-time password at best, and likely badly implemented with its associated risks. I do see quite some ...
- 7,095
-1
votes
1
answer
460
views
Tracing the email's MAC address
Can someone trace the MAC address of an email to the point of origin if the email address has been deleted? I received an email from an unknown sender regarding an issue at my work, and when I tried ...
0
votes
2
answers
193
views
What does the IMAP banner alone show regarding security (STARTTLS, hashing, information disclosure)?
I encountered an open TCP/143 IMAP port which responded with this banner:
* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=...
- 7,095
6
votes
1
answer
2k
views
Spoofed email sent to me from my email address with SPF/DKIM/DMARC passing
I received an email earlier today on my work email address. The email came from the same address—mine—but I didn't send it.
It was an email claiming that he was a professional hacker who had hacked my ...
- 161
0
votes
1
answer
215
views
Text that is turned into links by email clients
When sending emails in the context of an application that will send transactional or marketing emails, sometimes you want to include user-provided information in the body, like for example you ask the ...
- 283
2
votes
0
answers
231
views
Is email between "large email providers" now secure against interception?
Now that almost all users use only a few email providers, is email content secure from interception? This related question was closed referencing a question about the security of SMTP IMAP, and POP:
...
- 249
0
votes
1
answer
145
views
How can an email forwarding service send email with a "From" from a domain they don't control, and still pass SPF?
Let's say:
[email protected] sends an email to [email protected].
Bob owns the domain bob.com but doesn't manage an emailing server. Instead he uses an email forwarding service (provided by his registrar /...
- 953
0
votes
0
answers
120
views
Proper HIPAA security
I am a sysadmin, though not security-specific. I was recently stunned to receive an automated email from my physician's office (in USA) containing an HTTP link to their website for the completion of ...
0
votes
3
answers
432
views
Gmail encryption
Is sending emails between Gmail accounts encrypted, can ISP read gmail content in transit??
1
vote
1
answer
167
views
Measures to safeguard against ZeroFont phishing attack
What measures can be taken to safeguard against ZeroFont phishing attacks (setting font size to zero), and how can email security settings assist in the detection of ZeroFont elements and the ...
