7 ms·
You do not need to compromise anything, you can put any address in the "from" field. Email has no universal verification for sender address.
by codedokode 3d ago
You do not need to compromise anything, you can put any address in the "from" field. Email has no universal verification for sender address.
- haakon 3d agoI would sincerely hope .gov addresses use SPF/DKIM/DMARC. That makes spoofing impossible. In Revolut's case, the sender's email system had been compromised.