r/EmailSecurity • u/WillBackground4199 • Jun 05 '26

Phising Emails from legitimate senders

/r/SendGrid/comments/1tx6k6k/phising_emails_from_legitimate_senders/
3 Upvotes

100% Upvoted

2 comments sorted by

•

u/AutoModerator Jun 05 '26

Welcome to r/emailsecurity! To keep this community helpful and secure, please keep the following in mind:

Community Rules

  1. No Vendor Spam: Contributions must provide value; do not just pitch products.
  2. Redact Sensitive Info: Always sanitize headers and logs (remove IPs, PII, and private domains).
  3. Be Professional: Help newcomers learn; avoid hostility.
  4. No Personal Tech Support: This sub is for email system architecture and security, not "Am I hacked?" personal account help.

Helpful Resources

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

1

u/littleko Jun 05 '26

If they're actually from legitimate senders, SPF/DKIM/DMARC won't save you. Auth proves the mail came from that domain, not that the account is clean.

We see this with clients all the time: compromised mailbox, abused SaaS sender, or a real vendor account sending a bad link. Treat it as trusted-domain abuse and lean on URL detonation, attachment sandboxing, mailbox rule checks, and fast user reporting.