Quote:
Originally Posted by jahtemg
That could be a fake email. Faking sender email etc is just a peace of cake. Probably,
Check this, if curious: 
|
You can’t fake the adress if it has SPF rules. SPF is a rule that shows from what IP’s the domain is allowed to send mail from. If you just simply send a telnet mail, the IP will not be allowed in the SPF from where you send the mail and then it will not pass the SPF checks on the mailserver recieving the mail and making it undeliverable.
The release of the files was from a FTP server without authentication. I do believe that it was an internal leak and the files was distributed by purpose of someone in vietnam since FTP’s are by default set with user and password (even in windows 2003, this was a windows server).