Attackers can hide 'external sender' email warnings with HTML and CSS

guest · Apr 22, 2021

Attackers can hide 'external sender' email warnings with HTML and CSS
April 22, 2021
https://www.bleepingcomputer.com/ne...rnal-sender-email-warnings-with-html-and-css/

The "external sender" warnings shown to email recipients by clients like Microsoft Outlook can be hidden by the sender, as demonstrated by a researcher.

Turns out, all it takes for attackers to alter the "external sender" warning, or remove it altogether from emails is just a few lines of HTML and CSS code.
Click to expand...

This is problematic as phishing actors and scammers can simply include some HTML and CSS code in their outgoing emails to tamper with the wording of the warning message or to make it disappear altogether.

Regardless of whether an email contains the "external sender" warning, or on the contrary, touts itself to be "safe," users should be careful prior to opening any links or attachments in the emails they receive.
Click to expand...

Log in or Sign up

Attackers can hide 'external sender' email warnings with HTML and CSS

guest Guest

Log in or Sign up

Attackers can hide 'external sender' email warnings with HTML and CSS

guest Guest

Useful Searches