Questions tagged [email-spoofing]

Email spoofing refers to the process of sending fraudulent emails that appears to be from someone that it is not.

Filter by
Sorted by
Tagged with
0
votes
2answers
459 views

Mail server security: Authentication in SMTP servers for mails from same domain

SPF and DKIM helps to determine whether a sender is allowed to send a mail from a specific domain or not. Now, if X employee of Company with email X@Company.com tampers the message headers and sends ...
4
votes
1answer
191 views

What can someone gain from basic personal data?

I've recently received a series of weird emails which I believe to be phishing attempts, the only thing is, I'm not quite sure what they're going for and I'd really love to figure it out. The emails ...
0
votes
2answers
2k views

Why SPAM mails have UK Contact Addresses and Emails?

I've seen a similarity in most of the SPAM mails I receive, that majority of them are sent from Hotmail accounts and specifically from hotmail.co.uk domain. Another thing that I noticed is, the ...
1
vote
2answers
556 views

Does the use of the non-registered domains in SPF records introduce a security risk?

Recently I was reading about the Sender Policy Framework (SPF) record syntax on OpenSPF.com. Sender Policy Framework (SPF) is a simple email-validation system designed to detect email spoofing by ...
0
votes
2answers
167 views

How does an email provider verify my custom domain name?

I'm new to this and I've read a tutorial on this page: http://www.melyssagriffin.com/use-gmail-custom-domain/ The author of the tutorial wrote about her experiences of setting up a custom domain name ...
0
votes
3answers
2k views

Email from supposedly Apple (mycloud.ssl.com)

I got an email where it says that Apple recently failed to validate my payment information and therefore they need to ask me to complete a short verification process in order to verify my account. At ...
1
vote
0answers
509 views

Detecting Bots Who are sending Spam Mails via Webmail

I am working on spam Detection done by botnets. Some Information Recently,I came through a techique to detect the spammer in my network which is based on the anamolous amount of MX queries,outbound ...
-1
votes
1answer
768 views

How do Bots Spam Where Outgoing SMTP is blocked

I have read,that bots in an internal network talk directly to External Mail servers instead of going through the Internal Mailserver to deliver spam. Query If it's true, than how do Bots spam do so ...
7
votes
3answers
634 views

Is it enough to look at the sender's email address?

I use Gmail. When I receive an email, Gmail displays the sender's email address. So far I've always looked at this address when receiving sensitive mails, to avoid phishing. For example, I know by ...
2
votes
0answers
52 views

Something phishy going on with email [duplicate]

I own my own domain. For a month or so I've been getting emails from addresses I don't know with "see attached image" or "find the attached invoice", with a zip/rar file attached. Of course, I ...
3
votes
2answers
548 views

How Does A Hacker Send Spam Emails from Gmail with Two Factor Turned On?

We recently had an incident where two-factor authentication was enabled on a Gmail account but the account was sending spam messages. The device login activity shows no abnormal devices accessing the ...
1
vote
1answer
164 views

How does my unused e-mail address get spoofed? [closed]

I have 2 e-mail accounts - one on GMail and other one on a popular mail provider in my country (O2). GMail has a secondary e-mail set for security - that is the O2. I started getting e-mails from ...
1
vote
1answer
85 views

Can someone using Thunderbird with Enigmail plugin be a victim of email spoofing

Let's say Bob pretends to be Alice, spoofs a non encrypted email to make it look like Alice and sends that to John who uses Thunderbird with Enigmail plugin.
0
votes
1answer
735 views

Where email orginates [duplicate]

I keep getting emails from an unknown person. In the header file, I see this: authentication-results: spf=softfail (sender IP is 25.152.82.59) smtp.mailfrom=outlook.com; gmail.com; dkim=none (message ...
1
vote
3answers
2k views

Pin delivery: SMS, mail, or pin mailer?

Imagine a scenario where a 4-digit pincode needs to be delivered securely to an end-user. Several possibilities exists: Pin mailer (this seems to be standard according to ISO 9564-1) SMS Email Email ...
3
votes
3answers
273 views

What kind of email attack is this?

I received the following invoice_scan_nHl8GB.js as an email attachment from a spoofed email address/infected PC zipped in a E.zip. Strangely the sender's address is not properly spoofed, probably ...
-3
votes
1answer
672 views

Is it possible to Use someone public IP? [closed]

I am quite aware of the networking. But I have a confusion which I am searching over internet but did not come to any solution. Can we assign any specific IP to our PC or any device. Like I want to ...
9
votes
2answers
1k views

Why don't banks sign their email using S/MIME?

If email sent by my bank included S/MIME signatures that my mail client can verify, then I would have the assurance that the mail was not tampered with or sent by some malicious third-party. Most ...
18
votes
3answers
5k views

Somebody is spoofing my email to send spam messages, and I have no idea how to block

Someone is using my Google Apps Email ID to send spam messages and I've received 2000+ undelivered and autorespond emails. I have no idea how to block this because the spammer is also using my email ...
2
votes
2answers
629 views

Why can't my email server automatically identify spoofed addresses?

I get this question from business stakeholders a lot, and I have tried to solve this problem on my own. I have a potential approach, but I want to challenge my assumptions. In my mind, it should be ...
0
votes
3answers
92 views

Amateur society - What file type to use in email?

Suppose there is a small, non-profit, organisation; say a church or music society. They want to communicate with members, for example to distribute minutes of meetings. The members are have varying ...
8
votes
1answer
2k views

Got a spam mail with an htm attachment, is the script harmful?

Today I got an email with an htm attachment, the mth contains the below code: <html> <head> <script> var url = "" window.location.href= url; ...
-3
votes
2answers
2k views

Faking email domain names [duplicate]

My organisation uses the following domain name '@organisation.org.au' to specify emails that have originated from within the organisation. Is it possible to use an online tool to create a fake email ...
1
vote
1answer
235 views

"FROM" mail spoofing [duplicate]

I just received a mail from my boss saying someone with my mail has send some request for money. I is kinda serious and I know it is easy to spoof a mail, but the mail is myname@mycompany.com. So my ...
6
votes
3answers
26k views

I'm getting spam e-mail...from myself?

I noticed yesterday that I had received spam e-mail, but my own e-mail address was listed as the sender. Naturally, I changed my password. This is probably a spoof, but I don't know enough about ...
1
vote
1answer
352 views

how to track IP address from which mail has been sent?

I am from India. I have get few mails from some random Gmail ID. How to get the information from which IP address it has been sent ?
-1
votes
1answer
332 views

Server is Sending Spam

I have determined that my server is compromised because it is sending spam (from one of my legitimate addresses). How can I determine what's compromised? Does the attacker know my SSH password? ...
0
votes
1answer
644 views

Correct way of dealing with spam via impersonation

I've been having a recurring problem at work: My boss's contacts keep receiving emails with links sent by a fake adress. The adress always has my boss's name + a different domain name every time. ...
0
votes
1answer
1k views

Is it possible to forge email info in header?

I recently received an email from a guy making me a job offer for a big government company and stating that he works there. However instead of using the domain of the company, he is using GMail. ...
5
votes
1answer
10k views

Gmail may be hacked - bulk spam emails being sent FROM Google apps account

I have a Google Apps email (Gmail with my own domain) - let's call it John@example.com. 3 days ago many people in my address book were sent a spam email FROM my John@example.com account. When I ...
2
votes
3answers
191 views

Site hack with email phishing scam [closed]

We have a small business website that has been compromised. They are somehow getting customers order details and contacting them requesting their credit card details. We have had our web team and a ...
2
votes
2answers
324 views

Using email as individual validation

My company often sends orders to brokers and banks to execute certain actions (like buying x stock or y fund). In order to reduce bureaucracy we are considering send a list of emails that are allowed ...
4
votes
2answers
622 views

Is it appropriate to block a sender's email address

This morning I received a mail from Apple suspension UK <do_not_reply@apple.co.uk> with the subject Apple "Unauthorised transaction alert". The mail was sent to one of my company's distribution ...
1
vote
2answers
164 views

Received email at work from someone using a member's name

The email message looks like this. This person used a church member's name and used a totally different email address. It went like this: Hi! How are you? (then gives a bad web address) ...
6
votes
2answers
8k views

How to prevent abuse of SMTP by sending spam emails?

I'm not an admin, I just created a website, and there's also a mail server on the server I payed for from my hosting provider. Most for what I learnt about mail servers is from an internet tutorials. ...
3
votes
1answer
1k views

How safe is it to use shared SPF record domains?

I'm wondering the following, what if shared SPF records like below are used? v=spf1 include:_spf.google.com ~all v=spf1 include:spf.mandrillapp.com ~all v=spf1 include:servers.mcsv.net ~all Can it ...
4
votes
4answers
8k views

Is it easier to eavesdrop on Ethernet connection rather than WiFi?

I heard someone say that ethernet connection is vulerable if someone can connect to your LAN, and that the traffic isn't encrypted in the way it might be if you're using WPA wifi encryption. Is this ...
3
votes
4answers
2k views

What are some ways to spot email spoof attacks?

I use Gmail and I started getting malicious-sounding emails from people I know intimately. The people I spoke to said they did not send those emails. In order for the attacker to carry this off, are ...
1
vote
1answer
829 views

How spf records prevents the server from attackers?

I have very little knowledge about spf records. I have Googled a little and found that spf records are used to prevent email spoofing. But I dont really understood how this works. I would like to know ...
1
vote
2answers
430 views

Is this a case of simple email spoofing or has my email account been compromised?

I just arrived home and when got to my computer I checked my mail box and it was with a message coming from my own email address that was sent almost at the same time I got home. I promptly ...
0
votes
0answers
757 views

"[!] Something went wrong.. Try again" sendmail with setoolkit in kali behind tor

I've been working in a little project, and the goal right now is spoof an e-mail address. That simple, but doing it in an elegant way. I've done the following, using Kali on a VM (in VirtualBox) I ...
-5
votes
1answer
969 views

Received emails from China Company about my Business name and they want to use it [closed]

Email 1: Dear CEO, (If you are not the person who is in charge of this, please forward this to your CEO, because this is urgent, Thanks) We are a Network Service Company which is the domain name ...
1
vote
0answers
570 views

How should an ISP approach Mutual Auth TLS for SMTP email? (Domain Auth Email)

I'm looking for an easy to deploy way to make email clients (MUAs) display my email messages in a secure manner. PGP and SMIME both do this today, but they are high touch, and require software or ...
0
votes
1answer
112 views

Is a MitM (Man in the Middle) attack by definition an altered or injected communication on an encrypted communication?

If so, what is it called when someone alters or interjects into un-encrypted communications? Is that email spoofing? How is it resolved? End users probably are more concerned with the fast ...
1
vote
1answer
21k views

Email sent to people with my name in the from section, but not my email address [duplicate]

I have had a couple emails sent to people who have sent me an email in the past (in my inbox, but who are not necessarily on my contact list). They have my full name in the from section, and in the ...
0
votes
1answer
2k views

Clicked link on fake email which appeared to be from friend [duplicate]

I receieved an e-mail which at first glance appeared to be from a friend, I clicked on the link provided without thinking as we would often exchance links to sites. The link went nowhere i.e page not ...
13
votes
3answers
49k views

How to Stop Email Spoofing [closed]

Apart from SPF, what else can be done to stop hackers from spoofing your company's email addresses?
1
vote
1answer
395 views

Spam Mail - have someone broke in to my shared hosting account? [duplicate]

Yesterday I noticed that one of my e-mail addresses (the only one within that domain) started to receive a lot of weird messages that the mail haven't reach the target (something like "Sorry, Qmail ...
1
vote
1answer
816 views

Can a hacker use someone else's IP address when running a scam?

I have a friend who works on a ship currently in Accra, Ghana. We do video chats but his system is extremely slow and sluggish. There have been times where our only form of communication is IM. A ...
-3
votes
1answer
140 views

Feedback Form Exploitation possible or not? [closed]

how an attacker can exploit the below provided feedback form in a company website containing the company’s domain? the feedback form does not store data into a database. The server side code only ...