It is amazingly easy to fake emails. In general, you really just need access to something as simple as a web browser with PHP installed. Actually, you don’t even need that, but it makes it so much easier. I mean, when all you have to do is simply write a single line of code? Yea. That’s tit easy. And you know how much we like tits.
So I got bored the other day and put together an email spoofer then posted it on my site, for all to use. Jokes on you, for protection reasons it prepends and appends a notice saying that the email was spoofed and not to trust the source. It was just a proof of concept to show how very stupidly easy it is to toss together.
It is actually really easy to tell if an email was spoofed. You just have to check the source of the email. If it looks funny to you, then its probably spoofed. Funny would be if it doesn’t originate from a person who it should have. For instance, say you get an email from your boyfriend, asking for those private pictures you like to send. When you read it, you look at the email and that is definitely your boyfriends email.
So you hit reply.
Being unobservant, and extremely excited, you don’t notice that the email you’re replying to is not, in fact, your boyfriends email, but is instead an email made to look identical to it (changing letters to numbers where they will be least noticeable) and you’re really sending those naughty pictures to that guy in IT that thought you winked at him that one day when you really just had something in your eye.
Guys: See where I’m heading with this? Hide yo’ women, hide yo’ babies, they spoofing emails e’rywhere!
Seriously, just keep an eye on things. Due diligence and what not. Make sure that you don’t just assume that a message is safe.
What are spoofed emails used for?
Well, I’ve already given you the perverted use, but there are a few more. Scammers use spoofed emails as a way of contacting friends of yours and using your good name to entice them into clicking links and opening attachments that they wouldn’t normally. Why? Because these two actions make you oh, so, insecure. The spread of virus doesn’t just happen in the bedroom, it happens right here in the good ol’ web. And if one of these people gets into your system, they can look around and try to find your financial details, private information, they’re looking through Internet receipts, finding out that you watch Netflix, shop on amazon, and have a serious porn addiction.
I mean come on.
Slow down on that.
Armed with that information, and your email address, they can start targeting you with spam, and hell if they caught a credit card number while they were snooping, they might as well use that to make a few purchases along the way.