Spoofing

Fraudulent sending of emails appearing from legitimate sources.

Posts for this tag
All posts
The Risks of Abruptly Enforcing DMARC p=reject in Organizations

Sudden DMARC enforcement can disrupt workflows, block emails, and impact organizational operations significantly.

The Risks of Abruptly Enforcing DMARC p=reject in Organizations
How a Fake Bank Transfer Email Nearly Fooled Me

Spoofed emails can mimic trusted senders, highlighting risks in elementary school communications.

How a Fake Bank Transfer Email Nearly Fooled Me
Microsoft 365 Groups Bypass DMARC, Exposing Organizations to Spoofing

Microsoft 365 groups can deliver spoofed emails despite failing SPF, DKIM, and enforced DMARC policies.

Microsoft 365 Groups Bypass DMARC, Exposing Organizations to Spoofing
Why Subdomain DMARC Policies Are Often Unnecessary

Proper DMARC enforcement on the root domain protects non-existent subdomains without needing separate policies.

Why Subdomain DMARC Policies Are Often Unnecessary
Phishing Alert: Netflix Subscription Cancellation Scams on the Rise

Scammers exploit lookalike domains to send fake Netflix cancellation emails targeting unsuspecting users.

Phishing Alert: Netflix Subscription Cancellation Scams on the Rise
Massive Phishing Campaign Targets Yahoo Using Client’s Domain

Over 72,000 phishing emails exploited a past client’s domain, bypassing DMARC monitoring protections.

Massive Phishing Campaign Targets Yahoo Using Client’s Domain
How Threat Actors Exploit Redirect Chains to Bypass Spam Filters

Phishing attacks use legitimate infrastructure and redirects to obfuscate URLs and steal credentials.

How Threat Actors Exploit Redirect Chains to Bypass Spam Filters