E-mail Spoofing

Recently I have reason to believe one of my friends was email spoofed. Someone had used her yahoo e-mail and sent a malicious email to someone and we're sure she didn't do it (well, not the receiever of the e-mail). So I need to figure out how this was done. The email was not a crap clone done with adding a period, space or something and we're pretty sure they didn't get her password because when sending the malicious email they got the nickname incorrect. Here's an example: From: mrsperson <mrsperson@yahoo.com>

When it should be: From: Jane Doe <mrsperson@yahoo.com>

So we're pretty sure it was spoofed or something related. The person we think this was done by isn't an extremely skilled hacker type or anything so I'm looking for the simple things first. I'm still looking around with google and whatnot, but I would appreciate any help.

Why do you need to know how it's done? You can't counter-measure this.

So we can explain to the other person that she didn't send the spoofed email. We need to prove it to the other person. Besides, it's fun to learn new things don't you think?

So far, the closest I've gotten is using telnet mx1.mail.yahoo.com 25 But it kicks me off, so I have to either find some way to keep connected or I need to keep looking.

read up on SMTP spoofing articles on this site and hackthissite.org.

Ok, I've got it now. Telnet worked. Lol.

you got telnet to work?…hmmm i got the banhammer when i tried it…i got this like federal message saying that spoofing email and spamming is illegal blah blah….it was kinda funny actually

Any SMTP Open Relay can forge the sender's address, IIRC.

They could've just pulled a bulk emailing program from the internet, they let you send email with different addresses.