alt Hacker NewsYou do not need to compromise anything, you can put any address in the "from" field. Email has no universal verification for sender address.
You do not need to compromise anything, you can put any address in the "from" field. Email has no universal verification for sender address.
I would sincerely hope .gov addresses use SPF/DKIM/DMARC. That makes spoofing impossible. In Revolut's case, the sender's email system had been compromised.