Re:Attackers Used Look-Alike Domains to Steal $1M from a Chi...
by thaumasiotes on Saturday December 07, 2019 @07:18PM
(#21733571)
As bayarrhea points out, a signature doesn't help you if the attack model is "lookalike domain".
Email validation exists; gmail will let you know if email arrived over TLS or not. Validation that the source of an email matches the "From:" header is generally done by checking the domain's SPF record.
Email validation exists; gmail will let you know if email arrived over TLS or not. Validation that the source of an email matches the "From:" header is generally done by checking the domain's SPF record.
https://en.wikipedia.org/wiki/Sender_Policy_Framework
https://en.wikipedia.org/wiki/Email_spoofing#Countermeasures