Send , identify , trace Fake/Spoofed Email | Email Bombing | Email Spamming

Basics of working of Email (You can skip this part)

Email stands for Electronic Mail. Email sending and receiving is controlled by the Email servers. Email service providers configure Email Server before anyone can Sign into his or her account and start communicating digitally. Users from across the world register in to these Email servers and setup an Email account.

Email Travelling Path :-

Let’s say we have two Email providers, one is gmail.com and other is yahoo.com, ABC is a registered user in gmail.com and XYZ is a registered user in yahoo.com.

·        ABC signs in to his Email account in gmail.com, he then writes a mail to the xyz@yahoo.com and sends the message.

·        But what happens behind the curtains, the Email from the computer of abc@gmail.com is forwarded to the Email server of gmail.com. Server of gmail.com then looks for yahoo.com on the internet and forwards the Email of the yahoo.com for the account of XYZ@yahoo.com. Yahoo server puts that email in that account.

·        XYZ then sits on computer and signs in to her Email account. Now she has the message in her Email inbox.

Sending Fake/spoofed Email: -

Fake or spoofed email means the email from any email ID. It doesn't matter whether the sender's email really exists or not. Sender's email ID can be anything@anything.com. 

Methods: -

·        Using Open Relay servers: - An open relay server is that which allows people to send email by connecting to it.User connect to it via telnet and instructs server to send email. This method is outdated or simply I should say that, it doesn't work. I would not talk about it more.

·        Using Websites: - There are numberless websites that provide free service to send fake emails. But the problem is that they attach the advertisements along with your email.  But the best two, I have found that do not attach the advertisements.

www.emkei.cz      {have some advance options}
www.hidemyass.biz/fake-mailer/

·        Using mail sending scripts : The PHP contains mail sending function which allows us to send email with fake headers. Download a php script from here & Password is TRICKS4INDYA.

     We just need to upload the mail sending script on a web hosting site. It doesn't work on every webhosting site because there is no email sending support.  I have tested x10hosting.com (could take up to a day for account activation) , it works perfect. Some of the other are www.000webhost.com,byethehost5.com

Note: This script contains options of sending spoofed email, spamming and email bombing. Your hosting account might be immediately suspended on spamming/bombing. But it works perfect if you have any your own premium web hosting account. If you want to try email bomber, I could let you to use my own if sufficient people request in comments.

What is Email Spamming and Email Bombing ?

Email Bombing as clear from the name is sending the mass email that is large number of emails to a email ID in a single click. Email spamming is like sending an email to large number of email IDs in a single click. These activities are performed mainly for the advertisements of the products or services provided by a company. Many spammers spam to collect individual's personal information through some stupid things like 'fill these details to get your lottery amount' and that information is sold to businessmen looking for the people of different categories. There could be many more reasons of spamming. Spammers use automated tools to collect as many emails available on websites, forms, chat rooms and send spams to them.

How to identify whether an email is real or spoofed ?

It can be done by checking headers. Email headers is simply the text which contains the information about the mail servers that the email encountered in its path from the sender to receiver. It contains a lot of other information too.

Note: - I am just telling you a few points about this so that you would just get an idea about the approach. This may or may not depend on some factors.

We can view email headers in gmail by clicking at 'show orignal', in yahoo by clicking at 'Full headers' and such kinds of options in other email service providers.

If  you get an email displaying sender's email like someone@gmail.com, someone@hotmail.com, someone@yahoo.com . Then it should be originated from gmail, hotmail and yahoo servers respectively. But if it doesn't, the most probably the email would be fake. 

I will show you by an example, I received three emails in my gmail inbox from sender's address "someone@gmail.com."  Sender's address shows me that they should have been originated from gmail/google server, if they would be real.

Note: - There is a field called "Return-path" in headers.  If the email ID shown in this field and email ID you get as sender's email ID doesn’t match, then the email is surely fake.

Can we get sender's IP address from Email Headers ?

We may or may not. Gmail, yahoo normally does not reveal sender's IP address. But when we send an email from a php script, the headers might reveal Sender's IP. The conclusion is that answer to this question varies from different email service providers and the way how email is sent.


Can we trace sender's location, if we get his IP address ?

The IP address could only tell that which Internet Service Provider (ISP) is used by sender. Further details cannot be revealed without the help of that ISP. Normally the Public IP is dynamic that is it keeps changing. We need to ask ISP about the user who was assigned that IP at the time email was sent. If sender has purchased a static IP address, it doesn't matter that when exactly was email sent. He could easily be traced.

Feel free to ask any queries in comments.

Note: This is illegal and is for educational purpose only. Any loss/damage happening will not be in any way our responsibility.

 
If you want to keep up-to-date on the Ethical Hacking Tutorials news, latest Tips & Tricks, latest scams & most important awareness and are a member of Facebook, don't forget to Join the Tricks4indya Facebook page to keep informed about the latest security.

Read More

How To Hack Passwords | Hack Gmail / Facebook Account Password

By using this guide you will be able to "Hack Any Account ID" like Facebook, Gmail, Yahoo, MSN, …. etc. Here I have taken a example "How To Hack Gmail Account Password", This type of hacking is known as Social Engineering & if you are newbie on Tricks4indya then must read my previous post “Social Engineering – Art of Manipulation”.

Note: - This article is not only for hacking student but also for normal people. So, read the article completely & aware yourself from this type of fake email.

How To Hack Gmail Account Password

You all know about Email Spoofer (Fake Mailer : How to send Anonymous Email ). By this online email spoofer you can send email to anyone from any email address. In short you can use any email address to send emails.

Now it’s time of real hacking, If you get the email form "support@gmail.com " like : -

“Dear Sir/Mam

This mail is to inform you that we are going to delete your Gmail account within 7 working days as you are not following our terms and conditions . We found that you are not following our rule no. 9.B which is listed in our Terms of Use Guidelines Here

If you are thinking that you got this email as an error, please change your account password to "c11254fff3544696" , this is your recovering password . Please keep up your password as "c11254fff3544696" for atleast 7 working days so that our team can verify your account ownership.

Thankyou,

Google Fraud Investigation Team”

Right now you might be thinking that no one will fall in this trap and this is true but not. There are thousands of scams running in internet and though we fall in that scams. According to me, most of the people believe this type of email message because most of the people only use internet, they don’t know about technical things. I know when I was newbie in hacking at that time I got hacked by this type of scam email.

If people (even was me) believe in scam emails, then people will also believe the above fake email message, more over which is sent form "support@gmail.com".

This is one of best Social Engineering method used by hacker to full victim to hack email accounts and even bank accounts by most of the hackers, then why not we??

Thus, when victim change his password to "c11254fff3544696", we can get access to his account easily and by then can change his/her account password.

How To Hack Any Account Password

This I have just taken a example and this trick can be used to hack any email account according to your need.

Countermeasures: -

Never believe on this type of email because not a single company in world says their user to change password to 123456. If update available than they post massage on their own website.

So, if you receive a email says to change password to 123456 then DELETE IT IMMEDIATELY.

So guys, this was a short tutorial on how Anonym Mailer can be used to How To Hack Passwords | Hack Gmail / Facebook Account Password. This hack depends on the hacker’s creativity as it requires Social Engineering skills.

I hope you enjoyed this hacking method, if you have any problem on, How To Hack Passwords | Hack Gmail Account Password. Then please do comment and share your problem and even feedback.

Note: This is illegal and is for educational purpose only. Any loss/damage happening will not be in any way our responsibility.

Kindly Share this knowledge with as many people as you can and aware them from such fake emails. Feel free to mention your queries/doubts in comments. Keep Learning.

If you want to keep up-to-date on Ethical Hacking Tutorials, latest Tips & Tricks, latest scams & most important awareness and are a member of Facebook, don't forget to Join the Tricks4indya Facebook page to keep informed about the latest security.

Read More