[Corpora-List] Hacked email accounts (Bill Louw)

[John F. Sowa]

On 8/18/2011 9:05 PM, Alexander Yeh wrote:
> I have heard that the "from" field can be faked, at least to a certain
> extent.

That is very easy to fake.

Just check the "from" field in the spam you receive from companies
that look legitimate.  They're usually legitimate ids.  But the
URLs they want you to click are the dangerous ones.

So if you receive spam with somebody's id in the "from" field,
that doesn't necessarily mean that their computer was hijacked.
You have to view the hidden headers to see where it really
came from.

It just means that some spammer pasted a legitimate id in the
"from" field.

John


_______________________________________________
UNSUBSCRIBE from this page: http://mailman.uib.no/options/corpora
Corpora mailing list
Corpora at uib.no
http://mailman.uib.no/listinfo/corpora