6 ms·
That doesn't sound right. Aren't these @zendesk.com addresses?
by cjbprime 2y ago
That doesn't sound right. Aren't these @zendesk.com addresses?
- layer8 2y agoThe spoofed addresses were support@company.com, is my understanding. Zendesk is very well aware of SPF/DMARC, from their support pages.
- Thorrez 2y agoThe spoofed address was appleid@id.apple.com . support+id@company.com was the to address, not the from address. https://gist.github.com/hackermondev/68ec8ed145fcee49d2f5e2b9d2cf2e52#reproduction-steps-apple---zendesk---slack https://gist.github.com/hackermondev/68ec8ed145fcee49d2f5e2b...
- Thorrez 2y agoNo, it's spoofed appleid@id.apple.com addresses. But you are correct that it's not customer SPF/DMARC configuration that's the problem.