<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 16.0.19822.20086">
<TITLE></TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<BR>
<BR>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Aptos">Ohio members report that they have been getting spam emails from me check the email address to confirm and read the information in this em</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT FACE="Aptos">ail.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Aptos">How do I identify and deal with email spoofs/spoofing?</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Aptos">Overview</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Aptos">Email spoofing is a growing problem and has unfortunately reached the point where you can't reliably trust the information associated with an email to tell you who actually sent the message. Scammers commonly use email spoofing to hide the origin of an email message, in turn increasing the chances that you will respond, when sending out spam, phishing or malware laden emails. Unfortunately, it is possible because the main protocol used in sending email (SMTP) does not include an authentication mechanism. The risks associated with spoofed emails range from being a nuisance to endangerment of personal safety. Some jurisdictions have enacted legislation against this form of email identity fraud, but many agree that this is a technical problem that calls for a technical solution.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><B><FONT FACE="Aptos">Details: </FONT></B></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Aptos">Spam, phishing, and virus-laden email can take all of the usefulness and entertainment out of communicating electronically. At least you can trust email that comes from the people you know; or can you? In this article, we look at what email spoofing is, what it is used for, why it's possible, what the risks are, and what can be done about it.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><B><FONT FACE="Aptos">If you would like someone to investigate a spoofed email</FONT></B></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Aptos">If you are an individual associated with Purdue and have received what you believe to be a spoofed email, or if you aren't associated with Purdue, but have received an email that appears to have come from a Purdue account, please use the "Report Message" button in Outlook to forward the email and headers to the Security team. Alternatively, you can forward the spoofed email to </FONT></SPAN><SPAN LANG="en-us"></SPAN><A HREF="mailto:abuse@purdue.edu"><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><U><FONT COLOR="#467886" FACE="Aptos">abuse@purdue.edu</FONT></U></SPAN><SPAN LANG="en-us"></SPAN></A><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT FACE="Aptos">.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><B><FONT FACE="Aptos">NOTE: </FONT></B></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><I><FONT FACE="Aptos">Please realize that in some cases, it either may not be possible to identify the origin of the spoofed email or take action against the forger as not every state or country has laws against spoofing</FONT></I></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><B><FONT FACE="Aptos">Is There Anything I Can Do to Prevent Spoofing?</FONT></B></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Aptos">There are three email protocols that help secure and establish trust for incoming and outgoing email and prevent spoofing. Those three protocols (SPF, DKIM and DMARC) work together to help prevent spoofing and will be described below:</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><B><FONT FACE="Aptos">SPF</FONT></B></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT FACE="Aptos"> (Sender Policy Framework) is often described as the return address checker for email. Owners of domains and email servers establish a list of approved servers and IP addresses within their domain that are allowed to send email on their behalf. Email filters (such as </FONT></SPAN><SPAN LANG="en-us"></SPAN><A HREF="https://it.purdue.edu/services/microsoft-defender.php"><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><U><FONT COLOR="#467886" FACE="Aptos">MDO</FONT></U></SPAN><SPAN LANG="en-us"></SPAN></A><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN></P>
<BR>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Aptos">Richard Payne, President</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"> <FONT COLOR="#000000" SIZE=2 FACE="Helvetica">National Federation of the Blind of Ohio</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT COLOR="#000000" SIZE=2 FACE="Helvetica">937/829/3368</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN><A HREF="mailto:Rchpay7@gmail.com"><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><U></U></SPAN><U><SPAN LANG="en-us"><FONT COLOR="#467886" SIZE=2 FACE="Helvetica">Rchpay7@gmail.com</FONT></SPAN></U><SPAN LANG="en-us"></SPAN></A><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN><A HREF="http://www.nfbohio.org"><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><U></U></SPAN><U><SPAN LANG="en-us"><FONT COLOR="#467886" SIZE=4 FACE="Aptos">www.nfbohio.org</FONT></SPAN></U><SPAN LANG="en-us"></SPAN></A><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT COLOR="#000000" SIZE=4 FACE="Aptos">The National Federation of the Blind advances the lives of its members and all blind people in the United States. We know that blindness is not the characteristic that defines you or your future. Every day we raise the expectations of blind people, becaus</FONT><FONT COLOR="#000000" SIZE=4 FACE="Aptos">e low expectations create obstacles between blind people and our dreams. Our collective power, determination, and diversity achieve the aspirations of all blind people.</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN></P>
<BR>
</BODY>
</HTML>