[Ohio-Talk] Watch for spam email.

[Richard Payne]

Ohio members report that they have been getting spam emails from me check
the email address to confirm and read the information in this email.

How do I identify and deal with email spoofs/spoofing?
Overview
Email spoofing is a growing problem and has unfortunately reached the point
where you can't reliably trust the information associated with an email to
tell you who actually sent the message.  Scammers commonly use email
spoofing to hide the origin of an email message, in turn increasing the
chances that you will respond, when sending out spam, phishing or malware
laden emails.  Unfortunately, it is possible because the main protocol used
in sending email (SMTP) does not include an authentication mechanism.  The
risks associated with spoofed emails range from being a nuisance to
endangerment of personal safety.  Some jurisdictions have enacted
legislation against this form of email identity fraud, but many agree that
this is a technical problem that calls for a technical solution.
Details: 
Spam, phishing, and virus-laden email can take all of the usefulness and
entertainment out of communicating electronically. At least you can trust
email that comes from the people you know; or can you?  In this article, we
look at what email spoofing is, what it is used for, why it's possible, what
the risks are, and what can be done about it.
If you would like someone to investigate a spoofed email
If you are an individual associated with Purdue and have received what you
believe to be a spoofed email, or if you aren't associated with Purdue, but
have received an email that appears to have come from a Purdue account,
please use the "Report Message" button in Outlook to forward the email and
headers to the Security team. Alternatively, you can forward the spoofed
email to abuse at purdue.edu <mailto:abuse at purdue.edu> .
NOTE: Please realize that in some cases, it either may not be possible to
identify the origin of the spoofed email or take action against the forger
as not every state or country has laws against spoofing
Is There Anything I Can Do to Prevent Spoofing?
There are three email protocols that help secure and establish trust for
incoming and outgoing email and prevent spoofing. Those three protocols
(SPF, DKIM and DMARC) work together to help prevent spoofing and will be
described below:
SPF (Sender Policy Framework) is often described as the return address
checker for email. Owners of domains and email servers establish a list of
approved servers and IP addresses within their domain that are allowed to
send email on their behalf. Email filters (such as MDO
<https://it.purdue.edu/services/microsoft-defender.php> 


Richard Payne, President National Federation of the Blind of Ohio
937/829/3368
Rchpay7 at gmail.com <mailto:Rchpay7 at gmail.com> 
www.nfbohio.org <http://www.nfbohio.org> 
The National Federation of the Blind advances the lives of its members and
all blind people in the United States. We know that blindness is not the
characteristic that defines you or your future. Every day we raise the
expectations of blind people, because low expectations create obstacles
between blind people and our dreams. Our collective power, determination,
and diversity achieve the aspirations of all blind people.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://nfbnet.org/pipermail/ohio-talk_nfbnet.org/attachments/20260413/59de153d/attachment.htm>