Email question

[45DAVID1]

Is there a way to clone an email? Basically something happened to me and im curious as to how it was done.

Someone claimed I sent them an email from my email address. The printout does infact show my email address and a very nasty message that I could not have sent since I was 15,000+ feet above the Atlantic Ocean.

Are there websites out there where people can send emails to themselves but enter any email address they want in the "from" section?

[shooterfpga]

yes, there is. it was a lot easier probably still is. try looking at the headers and see if it still shows from your address. you can spoof anything, phone calls, emails, texts, admin messages on a network, etc.

[glockman19]

It sounds like you might have a virus affecting your address book..

[shooterfpga]

It sounds like you might have a virus affecting your address book..

he said very nasty, not spam. im assuming someone sent a hate mail spoofing his email address. not someone sending hey baby click this link im so horny.

[SouperMan]

Is there a way to clone an email? Basically something happened to me and im curious as to how it was done.

Someone claimed I sent them an email from my email address. The printout does infact show my email address and a very nasty message that I could not have sent since I was 15,000+ feet above the Atlantic Ocean.

Are there websites out there where people can send emails to themselves but enter any email address they want in the "from" section?

Yes; there are ways to spoof the sender's email address, but the way to tell is if you check the message header/delivery information to see if it is indeed a matched domain that sends out the email (someone@yahoo.com get's their email sent via non-yahoo server). There was a case awhile back that a spoof-email seemed to have been traced to a navy.mil email server, but it turned out that the attackers spoofed and matched the name of the server but could not hide the originating IP: http://www.navy.mil/navydata/navy_legacy_hr.asp?id=183

[JDay]

You can send an email and have it say it came from anyone, you need to look at the full headers to verify where it came from.

[Deadbolt]

check me out:

<?php
$to      = 'YOURMOM@home.com';
$subject = 'GURL I NEED YO BOOTY';
$message = 'mmmmmmm gurl I need dat booty';
$headers = 'From: OBAMA@whitehouse.gov' . "\r\n" .
    'Reply-To: OBAMA@whitehouse.gov' . "\r\n" .
    'X-Mailer: PHP/' . phpversion();

mail($to, $subject, $message, $headers);
?>

basically obama want's your mom's booty.

[Deadbolt]

check me out:

<?php
$to      = 'YOURMOM@home.com';
$subject = 'GURL I NEED YO BOOTY';
$message = 'mmmmmmm gurl I need dat booty';
$headers = 'From: OBAMA@whitehouse.gov' . "\r\n" .
    'Reply-To: OBAMA@whitehouse.gov' . "\r\n" .
    'X-Mailer: PHP/' . phpversion();

mail($to, $subject, $message, $headers);
?>

basically obama want's your mom's booty.

in hindsight this example is meant to educate - NOT to be suggested to emulate. I'm sure there's a law somewhere that even if you send an email like :

<presidential moniker>@<some governmental institution>.<suffix>

that says "the FBI is totally sending black helicopters to the freeway"

anyway - the post was meant to illustrate how easy it is to spoof email "of anyone" - i figured the example given substantiates the absolute and sheer ease of "simple" email spoofing

there are more in depth ways to accomplish this as well but those methods are not beneficial to this nor is it available to such a simple example as the one above


TL : DR -> dont misconstrue what was posted as something malicious - its meant to show the layperson the ease that a Nigerian has in terms of low level email counterfeiting

./ lol before anyone asks - no know one asked me to post this - i posted it and drove home, on that drive i considered the specific contents and was like "damn it thats just a bad idea all around"

./waits for FEMA to move me and family to a single wide