Questions tagged [email-spoofing]

Email spoofing refers to the process of sending fraudulent emails that appears to be from someone that it is not.

21 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
3
votes
0answers
1k views

How to set header.from?

A client recently received an email that was spoofed in a way that I'd never seen before. The following are the anonymised, relevant details from the email's headers: authentication-results: spf=none ...
2
votes
0answers
74 views

On a server I run, bogus incoming mail for a username which is my name. Should I be worried?

A server I run has a minimal public-facing mail exposure, running postfix on port 25 (no authentication on this port; IMAP is accessible by other means). In my mail logs it is not uncommon to find '...
1
vote
2answers
88 views

Anonymized posting mechanism for members-only-post mailing lists

Suppose you are administering a mailing list where only members/subscribers can post; but you want those members to be able to occasionally post some content to the list anonymously. (*) Now, in an ...
1
vote
1answer
74 views

Postfix pickup daemon "from:" verification

I was surprised to notice that sending email from a local server account allows any user to send a message with: From: whatever@whateverdomain This is a security issue, because it allows identity ...
1
vote
0answers
552 views

Receiving unknown bounced mails

I am getting some mails from Mailer-Daemon@s09.webhost1.ru recently which contains the following body polimer.****@list.ru (Generated from tm@polimer**.com) SMTP error from remote mail server ...
1
vote
0answers
509 views

Detecting Bots Who are sending Spam Mails via Webmail

I am working on spam Detection done by botnets. Some Information Recently,I came through a techique to detect the spammer in my network which is based on the anamolous amount of MX queries,outbound ...
1
vote
0answers
570 views

How should an ISP approach Mutual Auth TLS for SMTP email? (Domain Auth Email)

I'm looking for an easy to deploy way to make email clients (MUAs) display my email messages in a secure manner. PGP and SMIME both do this today, but they are high touch, and require software or ...
0
votes
0answers
29 views

How to update the Return-Path that Facebook sends with?

Each facebook user gets legitimate facebook emails with a fixed Return-Path: notification+ABC123@facebookmail.com header. I.e., Bob will always get mails from ABC123, and Wilma from EFG456. There is ...
0
votes
1answer
86 views

How can scammer actually reply from a spoofed email address?

I (mostly) understand how a scammer can send an email from a spoofed account, all you need is an unsecured SMTP server. But how is it possible, for a scammer to RESPOND and maintain an email ...
0
votes
0answers
103 views

Spoofed email? "X-Source-Sender" and "Received" headers look dodgy

I got sent an email from someone in response to an over 2 year old exchange, and the contents of it look like spam to me. Checking the headers the following looks normal: Return-Path Received & ...
0
votes
0answers
57 views

Does SPF protect against spammers who control the initial MTA?

I understand that for most users, the Envelope-from address is the most difficult part of an email to spoof because (I assume) it is checked by the receiving MTA i.e. if you attempt to spoof the "...
0
votes
0answers
75 views

How do I run through the DKIM authentication?

I am currently reading on DKIM authentication for email and I would like to manually try to run through it (to facilitate my understanding of DKIM), but I would like to verify if it is possible to do ...
0
votes
0answers
32 views

Saved email attachment not reflecting the actual sender of the email but the email of the person who received the email attachment as sender

I have come across certain scenarios which confuses me on how it is possible to manipulate email headers. The person who received an email(A) from person (B), forwarded me (C) the email as Original ...
0
votes
0answers
48 views

Is there a way to block/filter spoofed emails Office 365/Exchange?

My company is currently a target of some social engineering attacks where company employees are being sent e-mails from the attacker pretending to be senior members of staff. They have the correct ...
0
votes
0answers
128 views

Logged in with a hacker's email address

I have an active account at ebay-kleinanzeigen.de (like Craigslist in the US). Today I got a valid email from them that my email address was changed. On my mac, I opened up my ebay-kleinanzeigen ...
0
votes
0answers
61 views

How to detect a spoofed email with Outlook Web Access?

I am specifically asking about Outlook Web Access (browser based Outlook), and not for any other email service or program. Within Outlook Web Access, is there a way to tell whether or not an email ...
0
votes
0answers
231 views

simple question about smtp server ( msa to mta ) security design?

Not sure if this is due to security; hence the reason i am asking here. I have 2 SMTP server and a couple of unix servers the actual mailserver running on window. client connect to it and download ...
0
votes
0answers
757 views

"[!] Something went wrong.. Try again" sendmail with setoolkit in kali behind tor

I've been working in a little project, and the goal right now is spoof an e-mail address. That simple, but doing it in an elegant way. I've done the following, using Kali on a VM (in VirtualBox) I ...
-1
votes
1answer
88 views

Google Apps From : email address, spoofed how?

We use google apps for business to host our business emails, using our own custom domain mysite.com. I view my emails via gmail.com I recently received an email from me@mysite.com to me@mysite.com ...
-1
votes
1answer
768 views

How do Bots Spam Where Outgoing SMTP is blocked

I have read,that bots in an internal network talk directly to External Mail servers instead of going through the Internal Mailserver to deliver spam. Query If it's true, than how do Bots spam do so ...
-2
votes
1answer
9k views

Analyzing Received From header of Phishing Email

Our organization had received a phishing email some time ago. The phishing email was sent from a Compromised account within the organization. On seeing the header of the email, it has following ...