email forge

[elgrandeperro]

Hi, first post in this forum.

I know what happened, but trying to find the possibilities of how.

User was on her pc. It sent a letter to telecom, saying "Please reset my password".

The logged IP came from her laptop, from an authenticated session (Outlook is the mailer tag.).

So it isn't a spoof from outside, something crafted and sent the message from her pc.

What could do this? (Word macro?, javascript?)

 

[elgrandeperro]

Uh, our PC guy figured it out. Partial user error and not understanding how Outlook works.

 

[kjv1611]

[ROFL]

Thanks for the update!

--

"If to err is human, then I must be some kind of human!" -Me