When I get a spoofed email from someone it’s easy to spot but how do they know who to spoof?
So this morning I got an email from my brother in law, they used his name, but obviously not his address.
My question is how did they know to use his name? Is his email compromised and that’s how they got his name and my email address or is the compromise on my side, or is it as simple as email is easy to read the to from and nothing is necessarily compromised?
In: Technology
This is exactly what spear phishing and social engineering are. It’s not all that difficult for an attacker to figure out who your brother in law is with a couple of Google searches. If the email is spoofed then it’s more than likely his email isn’t compromised. Otherwise they’d use his actual email account and not a spoofed email address
Latest Answers