Email authentication latest threats

by George Chetcuti [Published on 5 Jan. 2015 / Last Updated on 5 Jan. 2015]

Authentication solves several specific issues related to email, but other problems are completely out of scope. Attackers know this, and have designed some of their attacks accordingly. Perversely, they are actually using authentication to improve the quality of their campaigns.

Email authentication is already a part of email server best practices, and properly implemented it represents a valuable solution to some phishing attacks. However, it is not a universal solution to email phishing.

It is worth noting that the display name and address in an email can be easily forged by a phisher. If an email’s content is already suspicious, just looking at the “From” field will not be conclusive, as this field can be modified too. Also, unless you are certain that the links in an email message point to an organization’s legitimate site (and not a plausible-sounding but fake one) then you should not click on them.

Read more about how Cybercriminals Dodge Email Authentication here - http://blog.trendmicro.com/trendlabs-security-intelligence/how-cybercriminals-dodge-email-authentication/

See Also


Review and Comments

* Required field

See Also

Featured Links