Skip to main content

Spammers Penetrate Gmail Spam Filters

I've discussed this in the past, but there are serious security issues with GMail, namely that the email forwarding ability allows spammers to redirect directly into a users inbox. The trick pretty much works best for Gmail accounts, whereby Google puts less scrutiny on emails sent within it's system compared to those sent by third-party email services like hotmail/live, yahoo etc.

Here's how it works:

Using Gmail to Bypass Spam Filters

  1. Spammer creates a new gmail account with a random, but credible looking name.

  2. Spammer whitelists their spam address in the account - so that their messages will always go to the inbox.

  3. The spammer then uses GMail's email forwarding setting to forward all emails to a target's address. This means all messages sent to the spam email will be forwarded off to the victim's address.

  4. Spammer does this for all their spam targets (mass-creates 1 gmail account for each victim).
  5. Spammer than sends their spam emails out to all the gmail addresses they created, which then gets forwarded off to the targets address.

What Happens?

Basically, the spammer gets a list of Gmail users to spam, and then mass-creates gmail accounts that will auto-forward all emails to users on the list. The spammer then sends their spam emails to the gmail accounts, which forward off the email and bypass the spam filter all together. The victim gets the spam message delivered straight to their inbox, because Google thinks that they forwarded the email to themselves and because its all handled within Google's own platform, there's less scrutiny put on it.

How Can Google Fix This?

Simple! Google should make users confirm the email address they wish to forward emails to, as it will ensure that you can only auto-forward emails to an account you own or control.

Comments

Popular posts from this blog

Free $5.00 from Audible

Audible is an online shop from Amazon that deals exclusively in selling audio narrated versions of books. With this you can get $5.00 free credit to any books of your choice (books range in price based on age and popularity) - you may able to get a few books for this.

Free Seedbox - Download Torrents without Using Your Bandwidth

Continuing in a summer of free stuff, you can get a free seedbox for a limited time.

What Are Torrents? If you're not familiar, torrents are a way to share and distribute files without requiring the file to be hosted somewhere. Torrents decentralize the sharing of files by ensuring that files are spread out across a number of computers. This means that if a server goes down, the file can still be downloaded because other users are seamlessly downloading and sharing it with others.

What is a Seedbox? A seedbox lets you download torrents remotely, meaning that a remote server downloads the file using bittorrent, and you can easily download it directly from the server once the file is complete. Seedboxes help you:
save bandwidth - since you're not uploading the files to othersdownload files faster - since the server has dedicated speedsavoid censorship - some ISPs will throttle your connection to slow down torrent downloadssimply computing - you can turn off your computer, and no…

Download Torrents Safely by using a Remote Seedbox - Seedr

A few years ago I shared a free seedbox (JustSeed.it) offer with you all. Unfortunately, that service has since gone down in quality and the owner has made some questionable decisions that for one reason or another, simply can't be trusted. Not to mention the service was also extremely buggy and suffered from uptime issues.

Fortunately, nearly 3 years later I'm happy to share a new seedbox service. Seedris a new startup from Israel that lets you download torrents remotely. They have a free plan that provides a healthy amount of space and paid plans that offer a very generous allotment of data compared to competitors. The service is very fast, and the reliability has been impeccable. If you download a video or movie file, they will even transcode it and allow you to watch it directly from their service (pro tip: their video player even supports streaming it to your Chromecast, and it works amazingly well - better than Streamcast and other Chromecast plugins).

Seedr lets you up…