• Home
  • Domains
  • Internet & Tech
  • Security & Privacy
  • Google & Search
  • Editorial Praise
  • Contact

Strategic Revenue - Domain and Internet News

Internet news authored by John Colascione

Register Domain Names

  • Isn’t Print Dead?
  • Killer Acquisition
  • New gTLD Death
  • Online Censorship
  • Gullible Domainers
  • You’re A Loser
You are here: Home / Domain Names / Scammers Sending Emails from Spoofed Authoritative Domains Via Forwarding Flaws

Scammers Sending Emails from Spoofed Authoritative Domains Via Forwarding Flaws

September 21, 2023 By John Colascione Leave a Comment

*** Here Is A List Of Some Of The Best Domain Name Resources Available ***






Spoofing
The integrity of emails sent from thousands upon thousands of domains can easily be compromised, researchers said. File photo: Fatmawati Achmad Zaenuri, Shutter Stock, licensed.

LA JOLLA, CA – According to research conducted by the University of California San Diego, due to flaws inherent in the process of forwarding emails, the ability for scammers and attackers to send unsuspecting victims e-mails from the spoofed addresses of top-level government or corporate domains is actually much easier than many experts were initially suspecting, opening up disturbingly new and effective avenues for online fraud.

The integrity of emails sent from thousands upon thousands of domains can easily be compromised, researchers said, up to and including U.S. cabinet e-mail domains – for example, state.gov – and national security agencies. In addition, corporate and financial entities – such as Mastercard – and numerous news agencies – such as The Washington Post and The Associated Press – are also vulnerable to this issue.

Known as forwarding-based spoofing, it allows scammers to bypass safeguards put in place by e-mail providers such as Gmail, iCloud, and Outlook and send messages impersonating official organizations. When a victim sees an e-mail that looks like an important message from a legitimate source, they are more likely to open it and click on attachments or links that may unleash malware or spyware upon their computer.

#Dontmiss #News #bugbounty #cybersecurity #email Email forwarding flaws enable attackers to impersonate high-profile domains https://t.co/izXxkkzvwb

— The Cyber Security Hub™ (@TheCyberSecHub) September 11, 2023

Forwarding-based spoofing arises from several vulnerabilities associated with forwarding emails, especially for organizations that outsource their e-mail infrastructure to third parties such as Gmail and Outlook. The main issue lies in the assumption that these organizations are operating their respective mailing infrastructure by utilizing specific IP addresses not associated with other domains. But when these organizations outsource their infrastructure to third-party e-mail providers, the ability exists to bypass the validation process of their domains by utilizing e-mail forwarding.

An attacker could create a spoofed e-mail with a state.gov domain address, taking advantage of the fact that the Department of State sends their emails through Outlook; as a result, any e-mail claiming to be from state.gov would be validated if it was sent through Outlook’s e-mail servers.

The researchers noted that they have reported the issue to Microsoft, Apple and Google, who are all said to be investigating and actively working on potential fixes.

John Colascione 2024
John Colascione

About The Author: John Colascione is Chief Executive Officer of Internet Marketing Services Inc. He specializes in Website Monetization, is a Google AdWords Certified Professional, authored a ‘how to’ book called ”Mastering Your Website‘, and is a key player in several Internet related businesses through his search engine strategy brand Searchen Networks®

Filed Under: Domain Names, Security Issues Tagged With: .gov, Associated Press, California, Compromised, Corporate, Domain, Email, Emails, Financial, Financial Services, Financial Transaction, Flaws, Gmail, Google, iCloud, Investigating, Legitimate, Malware, Mastercard, Microsoft, Online Fraud, Outlook, Research, San Diego, Scammers, Spoofed, Spoofing, Spyware, University, Victims, Vulnerable, Washington Post

*** Here Is A List Of Some Of The Best Domain Name Resources Available ***






Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Search This Site

by: John Colascione

John Colascione

Best Site for Things to Do While Visiting Florida
John Colascione is Chief Executive of Internet Marketing Services Inc. He specializes in Website Monetization, authored a book called Mastering Your Website, and is a key player in several Internet businesses through his brand SEARCHEN®

#Indiana.com

GEO domain name

Follow Me

John Colascione Twitter

The First Fiction Horror Story Based Entirely On An Internet Domain Name

The First Fiction Horror Story Based Entirely On An Internet Domain Name
A cyber thriller where the countdown to death is always ticking…

USED CARS ENTERPRISE

auto buyers market
Auto Buyers Market – Shop Used Cars by Participating Dealers at autobuyersmarket.com

In The News

  • DNJournal: New Book From Veteran Domainer
  • From Brandable to Exact-Match Geo Domain
  • InnovateLI: Two Deals, One Very Interesting Digital
  • Internet Commerce Association: John Colascione
  • NamesCon: Featured Attendee: John Colascione
  • Long Island Media Inc, SmartCEO, Future 50
  • Speakers, Name Summit, John Colascione
  • Speakers, Real Estate Summit, John Colascione
  • 24 Leading Domain Experts Analyze 2017

Popular Stories

Did DuckDuckGo Just Acquire Premium Domain “Duck.com” from Google?

New gTLD? Not So Fast; History Suggests New ‘Right of the Dots’ Could = Total Failure

Could Domain Investing Industry End with Legal Provision for Domain “Hoarding”

Websites and Domain Names to Become Insignificant within 20 Years or Less

Does the Domain Industry Suffer From Own Versions of Trumpted “Fake News” Stories?

Quotes to Follow

quote icon The domain name is equivalent to Gold. It is the only packaged item which is globally tax-free, portable, with value that is universal across different cultures. quote icon – Frank Schilling

quote icon Domains have and will continue to go up in value faster than any other commodity ever known to man. quote icon – Rick Schwartz

quote icon  Google knows you, your friends, your likes, what entertains you, where you are in the world at any given time. Google will soon predict your next action, your next thought, based on a collaboration of thoughts past. quote icon – John Colascione

Like These Headlines?

Enter your email address:

Delivered by FeedBurner

T.L.D. Brokerage

Domain Brokers

Bluehost & HostGator Expired Domains to be Auctioned on NameJet, SnapNames

WEST PALM BEACH, FL - In a notable development within the domain name aftermarket industry, NameJet has announced that expired domain names from two major hosting providers - Bluehost.com and … [Read More...]

Google’s Search Market Share Dips Below 90% for First Time in Decade

MOUNTAIN VIEW, CA - Google's global search engine market share fell below 90% in the final quarter of 2024, marking the first time since 2015 that it has dipped under this threshold. Regional … [Read More...]

Aflac Hit by Sophisticated Cyberattack: What Victims, Businesses Need to Know

COLUMBUS, GA - Aflac Incorporated, a leading supplemental insurance provider, disclosed that its U.S. systems suffered a cyberattack on June 12, 2025, potentially exposing sensitive customer data. The … [Read More...]

Domaining blog recommended by Domaining.com

Copyright © 2010-2025 StrategicRevenue.com - Property of Internet Marketing Services Inc.   FeedBurner: RSS
By using this site you agree to our Terms of Service and Privacy Policy. If you do not agree, please exit the service.