3 ms·

Why did the phishing email need a To address at all? I've seen "undisclosed-recipients;" used very frequently as the To address of an email BCC'd to a group of

Why did the phishing email need a To address at all? I've seen "undisclosed-recipients;" used very frequently as the To address of an email BCC'd to a group of people, so why not just do something like that?

galvin 9y ago
The emails where sent from compromised accounts and Gmail requires a "to" address, I think.
- eridius 9y ago
  I just tested. It doesn't. If you leave "To" blank and just provide a BCC the email it sends is addressed to To: undisclosed-recipients:;
deleted 9y ago
[deleted]