Re:Snapchat Employee Data Leaks Out Following Phishing Attack
by hayksaakian on Monday February 29, 2016 @05:13PM
(#11199065)
isn't this what DKIM and SPF and all those fancy email security things are for?
[ Parent
| on HN ]
Re:Snapchat Employee Data Leaks Out Following Phishing Attack
by tshtf on Monday February 29, 2016 @05:58PM
(#11199399)
An attacker-controlled domain, say snaapchat.com, can pass DKIM, SPF, and DMARC if configured appropriately.
Re:Snapchat Employee Data Leaks Out Following Phishing Attack
by eli on Monday February 29, 2016 @06:39PM
(#11199671)
Better solution is to append a warning to any message that originates outside the domain.
Re:Snapchat Employee Data Leaks Out Following Phishing Attack
by jcrawfordor on Tuesday March 01, 2016 @03:14AM
(#11201395)
This is actually a really good idea in corporate environments, and I would encourage everyone to think about doing it. It is a simple thing to push a rule to Outlook that e.g. displays emails from outside the corporate domain with a red tinted background in the email list. This helps people to think twice. It also compliments an email classification system well, although unfortunately most classification systems I've seen with good MUA integration are very expensive.