{"id":4592,"date":"2025-03-20T16:52:05","date_gmt":"2025-03-20T15:52:05","guid":{"rendered":"https:\/\/solidnames.fr\/email-spoofing-mail-sent-from-ones-own-address\/"},"modified":"2025-03-20T16:52:05","modified_gmt":"2025-03-20T15:52:05","slug":"email-spoofing-mail-sent-from-ones-own-address","status":"publish","type":"page","link":"https:\/\/solidnames.fr\/en\/email-spoofing-mail-sent-from-ones-own-address\/","title":{"rendered":"Email spoofing, mail sent from one’s own address"},"content":{"rendered":"

A forged or spoofed<\/strong> e-mail uses the sender’s real e-mail address, without the sender having actually sent the e-mail.<\/strong> An email spoofed with the interlocutor’s usual email address makes the request in the message plausible<\/strong>. The most advanced frauds collect information about the company in advance (social engineering) to give credibility to the scam. <\/h4>\n

<\/span>Professional social networks like LinkedIn make it easy to identify a company’s manager or accountant, and to usurp their identities.<\/p>\n

The ” email spoofing<\/strong> ” technique can be used to request a change of bank details<\/strong>. Fraudsters send an e-mail to a member of the target’s accounting department, pretending to be a supplier. The e-mail requests that future payments be transferred to another bank account controlled by the fraudsters. <\/p>\n

<\/p>\n

This scam is similar to the “Faux Ordres de Virement International” (FOVI)<\/strong> and the “Arnaque au Pr\u00e9sident<\/strong> “. In France, 485 million euros were stolen between 2010 and 2015 as a result of this type of scam; 2,300 complaints have been filed about them. In the United States, 3 billion dollars have been embezzled<\/strong> over the past 3 years. <\/p>\n

<\/p>\n

<\/span><\/p>\n

A “forged” e-mail may also contain “ransomware”, i.e. malicious ransomware<\/strong>. The recipient of the forged email will open it in confidence and trigger the deployment of a Trojan horse that will encrypt the data on the network files it uses. The “ransomware” then demands money in exchange for the key to decrypt the corrupted and unusable files. Payment is mostly made via a cryptographic virtual currency such as Bitcoin, which anonymizes the scammer. France is the fifth most affected country by “ransomware”<\/strong>, with almost 400,000 attacks in 2015. <\/p>\n

Identity theft via forged emails can be used to destabilize a company’s human environment<\/strong>. Falsified e-mails can be the subject of rumors to discredit employees and create a poisonous climate within the company. <\/p>\n

<\/span><\/p>\n

\n

Solidnames offers a Diagnosis of the Risk of Identity Theft by Email (DRUIDE)<\/strong><\/a> to identify and limit the risks of identity theft via email.<\/p>\n<\/blockquote>\n