Collaborate Disseminate
Recently we have encountered 2 instances of mass phishing attempts from 2 accounts using SendGrid although the SPF is published as hard fail for both without SendGrid records and only for the mail servers authorized to send. … Continue reading SendGrid emails ignoring SPF records for mass phishing attempts
I am specifically asking about Outlook Web Access (browser based Outlook), and not for any other email service or program.
Within Outlook Web Access, is there a way to tell whether or not an email was spoofed? For example, i… Continue reading How to detect a spoofed email with Outlook Web Access?
I have a situation where the authenticity of emails sent and received to an Office 365 account is being questioned. The claim is that the email conversation (a back and forth of about a dozen emails) was either created throug… Continue reading Proving Authenticity of Emails from Office 365 [on hold]
While SPF/DKIM/DMARC are standard, foundational tools to help protect an email-sending domain from spoofing, what about domains that do not send emails?
How do spam or phishing filters treat emails from domains without MX re… Continue reading Spam/Phishing detection when there is no MX record
After an incident, I have a question which answer’s I cannot find.
I cannot provide the real headers as they come from a client.
Let’s consider a company which uses an Office365 tenant as mail server. Its domain is example.c… Continue reading SPF and Office 365 email accounts spoofing other Office 365 email accounts
I got a message that looked like an ad from Microsoft. At the end, there was a message saying “You can simply WIPE Out your email from Mailing List click here”. I clicked. I got to a page this webpage: http://gokk.tezharimi… Continue reading I clicked a link in an email message. What should I do now?
A friend received a spoofed email (from Bank of America using an uber.com address) which was correctly identified as ‘spam’ by Gmail. However, looking at the raw message it seems to have passed SPF, DKIM and DMARC checks.
1… Continue reading How did a phishing email pass SPF, DKIM and DMARC?
DMARC produces “pass” result if and only if at least one of SPF and DKIM checks pass. It has been noted that DKIM provides stronger protection of the two (if implemented properly). But, in order to require namely DKIM passing… Continue reading What is the reason for DMARC spec to not require specifically SPF or DKIM pass?
This appears to be a phishing scam like I’ve never encountered before.
I received an email from security@mail.instagram.com to an email address I rarely use, but I noticed it because messages get forwarded to my main email a… Continue reading Bogus Instagram account using my email, never been verified, has over 1000 followers
Finally, even I got the fabled ransomware emails we’ve all heard about so much.
First, let’s look at the facts before I get to my question:
I use Mozilla Thunderbird as my email client.
I was using at least one VPN (one … Continue reading Received ransom email containing my password. How did they get my password?