6 ms·

While it would definitely be better if this displayed a warning when opening the link, it still requires the victim to willingly send the email. Before doing th

by jorams 6y ago

While it would definitely be better if this displayed a warning when opening the link, it still requires the victim to willingly send the email. Before doing that they see the list of attachments they are including, so this is a very visible attack.

rascul 6y ago
> Before doing that they see the list of attachments they are including, so this is a very visible attack. Depends on the client. I use claws-mail and I can't replicate this (not sure if maybe I'm doing it wrong), but I did note that if there were attachments, I wouldn't see them by default without clicking the attachments tab in the compose window.