Questions tagged [email-spoofing]

Email spoofing refers to the process of sending fraudulent emails that appears to be from someone that it is not.

21 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
3 votes
0 answers
2k views

How to set header.from?

A client recently received an email that was spoofed in a way that I'd never seen before. The following are the anonymised, relevant details from the email's headers: authentication-results: spf=none ...
2 votes
0 answers
105 views

On a server I run, bogus incoming mail for a username which is my name. Should I be worried?

A server I run has a minimal public-facing mail exposure, running postfix on port 25 (no authentication on this port; IMAP is accessible by other means). In my mail logs it is not uncommon to find '...
user avatar
1 vote
0 answers
122 views

Potential Western Union Scam - Account Registration

In recent weeks I have seen a handful of senior employees in my organization receive a confirmation email from Wester Union for a new account creation. The issue is that none of these users have ...
  • 172
1 vote
3 answers
172 views

Anonymized posting mechanism for members-only-post mailing lists

Suppose you are administering a mailing list where only members/subscribers can post; but you want those members to be able to occasionally post some content to the list anonymously. (*) Now, in an ...
  • 429
1 vote
1 answer
216 views

Postfix pickup daemon "from:" verification

I was surprised to notice that sending email from a local server account allows any user to send a message with: From: whatever@whateverdomain This is a security issue, because it allows identity ...
user avatar
1 vote
0 answers
627 views

Receiving unknown bounced mails

I am getting some mails from Mailer-Daemon@s09.webhost1.ru recently which contains the following body polimer.****@list.ru (Generated from tm@polimer**.com) SMTP error from remote mail server ...
1 vote
0 answers
543 views

Detecting Bots Who are sending Spam Mails via Webmail

I am working on spam Detection done by botnets. Some Information Recently,I came through a techique to detect the spammer in my network which is based on the anamolous amount of MX queries,outbound ...
  • 191
1 vote
0 answers
665 views

How should an ISP approach Mutual Auth TLS for SMTP email? (Domain Auth Email)

I'm looking for an easy to deploy way to make email clients (MUAs) display my email messages in a secure manner. PGP and SMIME both do this today, but they are high touch, and require software or ...
0 votes
0 answers
46 views

How am I receiving emails addressed to an address not associated with my account?

I currently have a g-mail address (example@gmail.com). I recently received a message addressed to example@aol.com. Looking at the header I see my correct address in the Delivered-To: field but in the ...
0 votes
0 answers
562 views

Spoofed email? "X-Source-Sender" and "Received" headers look dodgy

I got sent an email from someone in response to an over 2 year old exchange, and the contents of it look like spam to me. Checking the headers the following looks normal: Return-Path Received & ...
  • 279
0 votes
0 answers
104 views

Does SPF protect against spammers who control the initial MTA?

I understand that for most users, the Envelope-from address is the most difficult part of an email to spoof because (I assume) it is checked by the receiving MTA i.e. if you attempt to spoof the "...
0 votes
0 answers
139 views

How do I run through the DKIM authentication?

I am currently reading on DKIM authentication for email and I would like to manually try to run through it (to facilitate my understanding of DKIM), but I would like to verify if it is possible to do ...
  • 11
0 votes
0 answers
70 views

Saved email attachment not reflecting the actual sender of the email but the email of the person who received the email attachment as sender

I have come across certain scenarios which confuses me on how it is possible to manipulate email headers. The person who received an email(A) from person (B), forwarded me (C) the email as Original ...
0 votes
0 answers
84 views

Is there a way to block/filter spoofed emails Office 365/Exchange?

My company is currently a target of some social engineering attacks where company employees are being sent e-mails from the attacker pretending to be senior members of staff. They have the correct ...
0 votes
0 answers
168 views

Logged in with a hacker's email address

I have an active account at ebay-kleinanzeigen.de (like Craigslist in the US). Today I got a valid email from them that my email address was changed. On my mac, I opened up my ebay-kleinanzeigen ...
0 votes
0 answers
108 views

How to detect a spoofed email with Outlook Web Access?

I am specifically asking about Outlook Web Access (browser based Outlook), and not for any other email service or program. Within Outlook Web Access, is there a way to tell whether or not an email ...
0 votes
0 answers
281 views

simple question about smtp server ( msa to mta ) security design?

Not sure if this is due to security; hence the reason i am asking here. I have 2 SMTP server and a couple of unix servers the actual mailserver running on window. client connect to it and download ...
  • 501
-1 votes
1 answer
232 views

How can scammer actually reply from a spoofed email address?

I (mostly) understand how a scammer can send an email from a spoofed account, all you need is an unsecured SMTP server. But how is it possible, for a scammer to RESPOND and maintain an email ...
-1 votes
1 answer
125 views

Google Apps From : email address, spoofed how?

We use google apps for business to host our business emails, using our own custom domain mysite.com. I view my emails via gmail.com I recently received an email from me@mysite.com to me@mysite.com ...
  • 536
-1 votes
1 answer
845 views

How do Bots Spam Where Outgoing SMTP is blocked

I have read,that bots in an internal network talk directly to External Mail servers instead of going through the Internal Mailserver to deliver spam. Query If it's true, than how do Bots spam do so ...
  • 191
-2 votes
1 answer
10k views

Analyzing Received From header of Phishing Email

Our organization had received a phishing email some time ago. The phishing email was sent from a Compromised account within the organization. On seeing the header of the email, it has following ...