Can you use false headers to disguise location?

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Tue Apr 29, 2008 6:18 pm

Could mugus do that if they were smart enough? Here's an article I came across:

http://www.rr.com/flash/index.cfm?news=NEWS|4915698

Quote:

Man gets prison after hundreds of thousands of spam e-mails

DENVER(AP) A Colorado man accused of sending hundreds of thousands
of spam e-mails has been sentenced to 21 months in prison after
pleading guilty to tax evasion and falsifying e-mail headers.

Thirty-five-year-old Edward "Eddie" Davidson of Louisville was also
ordered to pay nearly $715,000 to the Internal Revenue Service. He
was sentenced Monday and ordered to report to prison authorities in
May.

Federal prosecutors say Davidson's operation used false e-mail headers
to disguise the sender. Prosecutors say some of the spam was meant to
dupe stock investors and manipulate markets.

Authorities say Davidson made at least $3.5 million sending e-mails for
nearly 20 companies.

Posted: Tue Apr 29, 2008 6:20 pm

That's just spoofing isn't it? And yes, lads do that.

Posted: Tue Apr 29, 2008 6:58 pm

Vlads are notorious for using spoofed headers.

Posted: Tue Apr 29, 2008 9:37 pm

How do you spoof a header?

~ChainYanker, tech-mugu

Posted: Tue Apr 29, 2008 9:54 pm

You need a friendly SMTP (Simple Mail Transport Protocol) server, sadly most have been so abused they're no longer friendly, but if you can install your own with a friendly ISP, then everything you need to know is in the RFC (literally "Request For Comments", how standards evolved) - google "RFC SMTP", it's a technical document describing how SMTP works, it's pretty simple stuff if you're tech-savvy.

Posted: Tue Apr 29, 2008 10:35 pm

He made $3.5 million.

He spends 21 months in prison and has to pay $715,000 to the IRS.

who says crime doesn't pay. Rolling Eyes

Posted: Wed Apr 30, 2008 4:35 pm

So he still made almost $3 million after the fine.

Now, lets assume he gets ass-raped once per week in those 21 months, that's roughly ( Laughing

) 84 times total. Is that worth $3 million to you? Confused

Posted: Wed Apr 30, 2008 4:38 pm

ChainYanker wrote:

How do you spoof a header?

~ChainYanker, tech-mugu

With a spoofer. Wink

Posted: Wed Apr 30, 2008 5:13 pm

That is costly, plus his record.. you know that lad didn't save that money... he probably smoked it all up.

Posted: Wed Apr 30, 2008 5:37 pm

Yes, you can easily spoof the sender.

Like this:

From: InnocentVictim(at)victimsdomain(dot)com

Posted: Thu May 01, 2008 1:42 am

You can't modify the 'from' field unless you have access to the server commands for SMTP. This requires an open email relay or server access. The server access you can buy and get SMTP abilities with it. Then send emails using the low level commands. The RFP for SMTP as mentioned above. But this procedure will not affect the actual headers. If you know how to find them and read them you can still find the source. Real spoofing uses an open server or a server you own (that is a spoofer). Or if you have root.

Posted: Thu May 01, 2008 9:48 am

Or you can just change the FROM settings in your mail program (Outlook Express, etc.)

Posted: Thu May 01, 2008 10:55 am

If you look at the headers that are posted for Vlad emails, you'll often see they use a SOCKS proxy to hide their real location. It's a pretty common practice these days.

Can you use false headers to disguise location?	View next topic View previous topic