Here's a quote from the linked article to which I take some measure of exception:

"Thanks to Mailsploit's tricks, no amount of scrutiny in the email client can reveal the fakery."

That may be true when looking at the header, but at some point any scam means re-directing the user to a site where you can spoof the login screens so you can capture usernames and passwords. A quick verification of any links plus a healthy skepticism of any attachment can go a long way to preventing being fooled. Unfortunately, the general population doesn't remember to follow these simple steps and they are fooled completely. This is the same group of people who get a calls from "Microsoft" and let them log into their computer.

Paul H. Tarver Email: paul@tpcqpc.com

-----Original Message----- From: ProfoxTech [mailto:profoxtech-bounces@leafe.com] On Behalf Of Ted Roche Sent: Wednesday, December 06, 2017 12:34 PM To: profoxtech@leafe.com Subject: [NF] New Email Sploit

Reminding folks of a rule from the past:

https://leafe.com/archives/msg/332976

Mail is not a secure medium.

https://www.wired.com/story/mailsploit-lets-hackers-forge-perfect-email-spoo fs/