Re: [exim] Anti Phishing Trick

Startseite
Nachricht löschen
Nachricht beantworten
Autor: David
Datum:  
CC: exim-users
Betreff: Re: [exim] Anti Phishing Trick
Hi !!

> Yes. Another point, however, is that, for your bank, you might want
> to give (just) them your unforwarded email address, or an address that
> forwards from a system does rely on SPF, ... or you'll get phish
> unless it is caught via some other mechanism. It's something to
> suggest to customers who get phish forwarded to them.


all of this requires a great effort, and at the end pishers could easly
pass through this systems. The real problem with pishing are dumb users,
they also will end giving their bank details when pishing comes from
senders outside the bank's domain or from domains similar to the bank's
domain (bbvanet.com -> bbvacom.net). At the end the users don't see the
envelope sender, they only see the To: header, and in turn every
misspelled variation of the real bank's domain could also be used on
the To: and many users will not realize of this.

--
Best regards ...

----------------------------------------------------------------
    David Saez Padros                http://www.ols.es
    On-Line Services 2000 S.L.       e-mail  david@???
    Pintor Vayreda 1                 telf    +34 902 50 29 75
    08184 Palau-Solita i Plegamans   movil   +34 670 35 27 53
----------------------------------------------------------------