Technical Discussion
  >> Windows Issues


Register (or login) on our website and you will not see this ad.


  Print Thread
Standard User samulam
(committed) Thu 20-Oct-16 21:47:30
Print Post

Spoofing an email address


[link to this post]
 
My wife received an email asking for financial help purporting to come from a friend visiting Eastern Europe. In fact the friend is currently in the UK It is clearly a scam. The email address is correct, so obviously it has been spoofed. So how easy is it to spoof an email address and how to spot it. The friend' email is a Hotmail !!, perhaps it is susceptible to this kind of thing.
Standard User RobertoS
(elder) Thu 20-Oct-16 22:04:51
Print Post

Re: Spoofing an email address


[re: samulam] [link to this post]
 
It isn't obvious it has been spoofed. It could have been sent from your friend's computer if they have got a virus. If that is happening many on the friend's address list will perhaps (not necessarily) have received similar.

The return address when viewing the detailed email header could be a clue to a scam, either sent as I just suggested, or by spoofing. Which I believe is quite easy.

Any attachments on the email must not be opened. Doing that is how many viruses are transmitted. Similarly, no links should be clicked.

The links can often be seen just by resting the cursor over them and it may show up in a status bar. Otherwise, "View source" which will open the html in a text editor. That can be a bit tedious searching through, though the text editor you are using will have a search option you can us to search for the text that is a link. The real link will be near to that in the source.

Kindness isn't going to cure the world of all its awfulness but it's a good place to begin. Daisy Ridley.
My broadband basic info/help site - www.robertos.me.uk. Domains, site and mail hosting - Tsohost.
Connection - AAISP Home::1 80/20. Sync 57825/13835kbps @ 600m. - BQM
Standard User ian72
(eat-sleep-adslguide) Fri 21-Oct-16 08:37:00
Print Post

Re: Spoofing an email address


[re: RobertoS] [link to this post]
 
It is also possible that someone has hacked the password on the sender's account and actually sending it direct - but as you say, more likely they have just spoofed the address.

SPF is the latest technology to help combat this but many provider's won't yet be using it.


Register (or login) on our website and you will not see this ad.

Standard User iand
(fountain of knowledge) Fri 21-Oct-16 18:01:59
Print Post

Re: Spoofing an email address


[re: samulam] [link to this post]
 
easy to spoof. Yes this is very easy
How to spot it. That can be a problem. It would be great if email client sw spots this, but they do not. Some Anti Virus software does.

In the email sw I use, I check the email headers if the email looks funny.

IanD
Standard User XRaySpeX
(eat-sleep-adslguide) Sat 22-Oct-16 18:55:03
Print Post

Re: Spoofing an email address


[re: samulam] [link to this post]
 
Easy, peasy! You don't need to hack anyone's PC or email. All you need to know, probably by being the recipient of an email propagated from an email the person once sent out, the person's email addy. Too many peeps blindly c.c. the whole distribution list when replying or forwarding an email, and so it goes on.

If I have an email client, not Webmail, all I have to change the Email Addy field to "bob@rxxxxxxxx.dddd.uk" & everything thereafter I send will seem to come from Roberto.

1999: Freeserve 48K Dial-Up => 2005: Wanadoo 1 Meg BB => 2007: Orange 2 Meg BB => 2008: Orange 8 Meg LLU => 2010: Orange 16 Meg LLU => 2011: Orange 20 Meg WBC
Standard User RobertoS
(elder) Sat 22-Oct-16 19:06:08
Print Post

Re: Spoofing an email address


[re: XRaySpeX] [link to this post]
 
Watch it you!! Or else I'll be sending you strong warnings from team@ tongue wink.

Kindness isn't going to cure the world of all its awfulness but it's a good place to begin. Daisy Ridley.
My broadband basic info/help site - www.robertos.me.uk. Domains, site and mail hosting - Tsohost.
Connection - AAISP Home::1 80/20. Sync 57825/13835kbps @ 600m. - BQM
  Print Thread

Jump to