Threat actors could launch stealthier targeted phishing attacks through the new Simple Mail Transfer Protocol smuggling technique, reports The Hacker News. Vulnerable Microsoft, GMX, and Cisco SMTP servers around the world could have inconsistencies in end-of-data sequence management exploited to facilitate arbitrary SMTP command smuggling and the delivery of spoofed emails with fraudulent sender addresses without being detected by Domain-based Message Authentication, Reporting and Conformance, DomainKeys Identified Mail, and Sender Policy Framework protections, a report from SEC Consult showed.

Source: SC Magazine