How to detect a spoofed email with Outlook Web Access?

Asked Jul 01 '19 at 18:08

Active Jul 01 '19 at 18:08

Viewed 108 times

I am specifically asking about Outlook Web Access (browser based Outlook), and not for any other email service or program.

Within Outlook Web Access, is there a way to tell whether or not an email was spoofed? For example, if I receive an email from "boss@company.com", how can I be sure that the email is from "company.com" and not spoofed?

There is an option in Outlook to direct all messages from outside the organization to the junk folder, but I found that this feature is not reliable. Spoofed messages still get through.

asked Jul 01 '19 at 18:08

Sam Smith

Is looking at the email-headers an option? – yeah_well Jul 01 '19 at 18:13
@VipulNair yes, if it is possible to do so in Outlook. However, I don't think there is a way to do that without opening the email first (which poses a security risk). – Sam Smith Jul 01 '19 at 19:04
How did you come to that conclusion that opening a mail is a security risk? – yeah_well Jul 01 '19 at 19:42
@VipulNair Email may contain an image or other link that gets fetched by outlook when opening the email and this gives information to the attacker. AFAICT there is no way to access the email headers without opening the email first in outlook online. – Giacomo Alzetta Jul 02 '19 at 12:08
@GiacomoAlzetta what kind of information? – yeah_well Jul 02 '19 at 12:15
@VipulNair That you have opened the email and are thus a candidate target for a phishing or a more sophisticated spearphishing attack – Giacomo Alzetta Jul 02 '19 at 12:16
@GiacomoAlzetta thats it?I dont think thats a huge issue. – yeah_well Jul 02 '19 at 12:19
@SamSmith https://security.stackexchange.com/questions/135884/why-is-it-dangerous-to-open-a-suspicious-email – yeah_well Jul 02 '19 at 12:19

How to detect a spoofed email with Outlook Web Access?

0 Answers0