Forum Discussion

MarkJFine's avatar
MarkJFine
Professor
8 years ago

Scary Email Scams...

Just got a beaut...   Email claims to have captured me in a compromising video by hacking my webcam and will send it to everyone in my addressbook unless I send $1900 to his bitcoin account. Includ...
MarkJFine's avatar
MarkJFine
Professor
8 years ago

The trick is to always look for the first "Received From" then there will be an IP in square brakets. That is the IP of the server that HELO'd your email server before it sent it. Everything else can be forged, including the servername that's supposed to be associated with the IP. Not likely the IP itself was was forged during a HELO handshake.

 

Edit: Looks like this:
Received: from APC01-SG2-obe.outbound.protection.outlook.com (mail-sg2apc01hn0245.outbound.protection.outlook.com [104.47.125.245])

GabeU's avatar
GabeU
Distinguished Professor IV
8 years ago

MarkJFine

maratsade

 

I sent PMs to you two that included a picture of the info I think I'm supposed to be looking at.  I didn't want to post it in public for the reason given in the PMs.