3 ms·
You say .gov-ish, does this mean compromised gov email accounts, spoofed email addresses or domains that look like government domains?
by sikozu 13d ago
You say .gov-ish, does this mean compromised gov email accounts, spoofed email addresses or domains that look like government domains?
- Maxion 13d ago.gov is a US thing, and not even all US agencies use .gov ending emails.
- deleted 13d ago[deleted]
- codedokode 13d agoYou do not need to compromise anything, you can put any address in the "from" field. Email has no universal verification for sender address.
- haakon 13d agoI would sincerely hope .gov addresses use SPF/DKIM/DMARC. That makes spoofing impossible. In Revolut's case, the sender's email system had been compromised.
- wodenokoto 12d agoAnd what about the rest of the world?