Send a PHISHING Email to the INBOX [Email Spoofing]

Send a PHISHING Email to the INBOX [Email Spoofing]
Send a PHISHING Email to the INBOX [Email Spoofing]
Send a PHISHING Email to the INBOX [Email Spoofing]
Send a PHISHING Email to the INBOX [Email Spoofing]
Send a PHISHING Email to the INBOX [Email Spoofing]

What is Email Spoofing?

Email Spoofing is a technique that is used to trick users into thinking that they are receiving a genuine email from somebody they know like a friend or a trusted company like Apple, Google, etc.

Who uses Email Spoofing?

Email Spoofing is used by hackers and social engineers as a delivery method to deliver their viruses, and Trojans to victims.

It’s also used by spammers to send spam emails to trick users into clicking on the link, which redirects the users to either a phishing page or a scam store.

Email Spoofing bypasses the trust issue, which increases the likelihood of downloading the malicious file or clicking on a URL.

Note

Before you spoof your Email, you need to gather information about the person you are targeting. Information such as in which company the person works, friends, coworkers, and family members.

This helps you identify which Email should you spoof which increases the likelihood of opening your Email.

I have a complete playlist about open-source intelligence [OSINT] on my channel. Check it out!

https://www.youtube.com/playlist?list=PLC56H0qfThs9rMfzMqkceEU4o6q0PvK6d

Send a PHISHING Email to the INBOX Live [Practical]

https://youtu.be/sCjFFDCUoWw
This video is for educational purposes only.

Video Goals:

  1. What is Email Spoofing?
  2. Why it’s used?
  3. Create SMTP server
  4. Send a Spoofed Email to the Inbox

Example

Let’s say you are targeting someone called John.

  1. You use OSINT to gather publicly available information about this person, like friends, or the CEO of the company where John works.
  2. Send John an email pretending to be his friend saying you have made a project and if he minds checking it out, OR send an email pretending to be the company’s CEO asking to visit a page or click on a URL.
  • Sending an Email as an Authority figure like a CEO or the Bank, or ISP, increases the likelihood of clicking a URL.

OSINT Links

Links to the websites are in CyberSudo’s OSINT Toolkit.

Get a Free Ethical Hacking Kit: https://bit.ly/438k4nS

  1. CyberSudo’s OSINT Toolkit
  2. 25% OSINT Masterclass Discount
  3. Hacking Radio Frequency mini-course
  4. Hacking Wi-Fi on OSX mini-course

OSINT Playlist https://bit.ly/3U3hoV0

Saad Sarraj

I am a CyberSecurity and Ethical Hacking/Penetration Testing passionate. I am also a TryHackMe Top 1% CTF Player.

1 Comments:

  1. Hi, the send phishing email tutorial is well explained but I am having this error when I execute sendemail command on Kali linux:ERROR => TLS setup failed: hostname verification failed. Kindly explain what I am missing.
    Thank you.

Leave a Reply

Your email address will not be published. Required fields are marked *