It looks like you're using an Ad Blocker.

Please white-list or disable AboveTopSecret.com in your ad-blocking tool.

Thank you.

 

Some features of ATS will be disabled while you continue to use an ad-blocker.

 

MailSploit — Email Spoofing Flaw Affects Over 30 Popular Email Clients

page: 1
4

log in

join
share:

posted on Dec, 5 2017 @ 10:57 PM
link   
Heads up to the few of you.

badactor news.something



Discovered by security researcher Sabri Haddouche, the set of vulnerabilities, dubbed MailSploit, affects Apple Mail (macOS, iOS, and watchOS), Mozilla Thunderbird, several Microsoft email clients, Yahoo Mail, ProtonMail, and others. Although most of these affected email client applications have implemented anti-spoofing mechanisms, such as DKIM and DMARC, MailSploit takes advantage of the way email clients and web interfaces parse "From" header. Email spoofing is an old-school technique, but it works well, allowing someone to modify email headers and send an email with the forged sender address to trick recipients into believing they are receiving that email from a specific person.


finding a parsing exploit would require some expert experience/ knowledge

I wonder if there is a new tool that can uploaded to Kali???




new topics
 
4

log in

join