Re:Snapchat Employee Data Leaks Out Following Phishing Attack
by r1ch on Tuesday March 01, 2016 @07:00AM
(#11202097)
SPF doesn't really do anything to prevent this. It can only protect the return path address, the scammer is free to use whatever From and Reply-To headers they like in the email itself - they don't really care if a bounce goes to the wrong place.
DMARC protects the From header, but isn't widely deployed.
DMARC protects the From header, but isn't widely deployed.