IP snowshoeing under US .gov email via a whitelisted AmazonSES typo in SPF
I run a small email security consultancy and this is our research. A typo of AmazonSES in US government DNS whitelisted 32,066 IPs to pass DMARC p=quarantine as milivcounty[.]gov, with the IP set rotating every 3-8 days
📄
This source provides headlines only. Use the button below to read the complete article on the original site.
📰 Read the original article on r/netsec
Originally published by r/netsec. Aggregated on AIWithGhost for educational purposes — full credit and traffic to the original publisher.