Direct email spool attack - Iron Bastion Security Blog

Sign in Subscribe

Direct email spool attack

A collection of 3 posts

Setting Up an Email Server for the Direct Email Spooling Attack (How-to Guide)

Setting Up an Email Server for the Direct Email Spooling Attack (How-to Guide)

This how-to guide aims to demonstrate how easy it is to circumvent expensive email security solutions with simple open-source tools. Email administrators can also follow this guide to build their email delivery service for email direct spool attack security assessments.

Discovering Hidden Email Gateways with OSINT Techniques

Discovering Hidden Email Gateways with OSINT Techniques

In this article, we elaborate how we managed to identify hidden internal email servers by relying on various open-source intelligence (OSINT) data sources for our direct email spool attack research.

How to Evade Expensive Phishing Filters with One Simple Trick

How to Evade Expensive Phishing Filters with One Simple Trick

One in three Australian law firms are susceptible to a cyber threat called “direct email spool attack”, our report can reveal. This attack technique bypasses expensive email security solutions, rendering them completely useless and exposing the affected organisations to cybercrime.