Collaborate Disseminate
Yesterday we received this email message through the contact form of our website from a russian server:
9th of April – SPOOF MESSAGE:
Name: John
Surname: Smith
EMail: pii-041570bf82880909f0aefee159d41349b9f2904e5bed6b48478e… Continue reading Suspicious spoof message through contact form pretending to be one of our employees
I am trying to figure out how we were spoofed for education purposes. The email came in perfectly with the user’s email address and name. The only way we found out was the header information. Most spoofing I see, I can tel… Continue reading How was I spoofed?
Present situation: I am receiving emails at a few of my email addresses, different domain names, all housed on the same server. The emails ares spoofed (appear to be coming from each of the email addresses), but looking at … Continue reading Can an attacker discover email addresses without gaining server access?
I have an app whose main purpose is to help people track emails they send.
In most user onboarding, The user is sent a secret URL via email. They validate by clicking a link to return the secret.
An alternative would be to… Continue reading Email verification by sending mail instead of receiving
We use google apps for business to host our business emails, using our own custom domain mysite.com.
I view my emails via gmail.com
I recently received an email from me@mysite.com to me@mysite.com stating id been hacked et… Continue reading Google Apps From : email address, spoofed how?
Premise: I know pretty well how SMTP works, and how to read an e-mail header. I know what all the main fieds mean, but I couldn’t know what to look for if I want to know if the mail is kind of malicious (e.g. spoofed).
For i… Continue reading How to extract intresting data from malicious e-mail header
One of our phishing scenarios during a pentest went like this: we send an email saying something along the lines of “As per the manager (CCd) please download the latest software included”. Then we attach the manager as CCd in… Continue reading Is there any tool or method to detect spoofed CCs?
Please see the screenshot attached.
A colleague sent me an email asking me to add something to our website. Her email was forwarding a PDF that she, in turn, received from someone else.
The thing is, what I received looks … Continue reading This email looks very dodgy, but can’t figure on what’s going on [on hold]
In the last 24 hours, SophosLabs received 1,700 samples of just one new sextortion campaign. Good news? It’s all a pack of lies. Don’t reply. Don’t engage. Continue reading “FINAL WARNING” email – have they really hacked your webcam?
I have been trying to learn about phishing emails. I have read up quite a bit on it. I setup a domain somthing.tk (free domain), hosted a website on a VPS (Digital Ocean). Set up my own mail transfer agent (Postfix).