TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

Lobsters — security tag

Email is crazy

samkhawase.com by flyingsnake · 2026-04-27 · Read original ↗

ATT&CK techniques detected

2 predictions
T1071.003Mail Protocols
69%
"says [ email protected ] whereas the from : header inside the message says [ email protected ]. unfortunately this is not an error and according to smtp they can be different. the first one ( mail from : ) is the envelope, used by servers for routing, and the second one ( from : …"
T1071.003Mail Protocols
49%
"to fix smtp but to add more duct tape. smtp was deeply entrenched and deployed everywhere by then. so in classic software development fashion, three separate systems were invented over the years and bolted on top. let us take a look at these three musketeers. spf ( sender policy …"

Summary

Comments