2 ms·
You say .gov-ish, does this mean compromised gov email accounts, spoofed email addresses or domains that look like government domains?
by sikozu 2mo ago
You say .gov-ish, does this mean compromised gov email accounts, spoofed email addresses or domains that look like government domains?
- Maxion 2mo ago.gov is a US thing, and not even all US agencies use .gov ending emails.
- deleted 2mo ago[deleted]
- codedokode 2mo agoYou do not need to compromise anything, you can put any address in the "from" field. Email has no universal verification for sender address.
- haakon 2mo agoI would sincerely hope .gov addresses use SPF/DKIM/DMARC. That makes spoofing impossible. In Revolut's case, the sender's email system had been compromised.
- wodenokoto 2mo agoAnd what about the rest of the world?