"Return to Sender: Bypassing Email Spam & Malware Filters"
summary
Explains three concrete exploits against cloud email: the bounce attack, the direct mail attack and the direct mail bounce attack, with measured exposure — about 25% of ASX200 vulnerable to bounce-style leaks, 35 of 94 ASX tenants using third‑party gateways (37%) open to direct mail bounce techniques, overall ~17.5% ASX200 affected. Shows how headers reveal gateway vendor, filter rules and spam score, cites an automation service called can i fish, and gives simple fixes: overwrite NDRs (one‑line PowerShell) and restrict inbound mail flow to gateway IPs.
AI-written summary · about
chapters (8)
- 0:00Introduction to phishing
- 1:28Evolution of phishing
- 3:40Modern phishing techniques
- 7:55The bounce attack
- 11:06Direct mail attack
- 13:36Direct mail bounce attack
- 16:17Mitigation and defense
- 17:34Conclusion and Q&A
related talks
44mModern Email Security
24mEnd-to-End Measurements of Email Spoofing Attacks
39mRed Teaming from outside: Identifying and exploiting SaaS systems... (Rojan Rijal)
31mHow to Write Terrible Emails Well?
52mLessons Learned from the Summer of Supply Chain Attacks
40mFighting Where They Aren't: How Attackers Avoid Endpoints in Modern Attacks
43mHunting for Bugs, Catching Dragons
01h 09mKeynote: An Unauthorized Exchange - From Targeted Espionage to the Global Cyber Pandemic