#e-mail — Public Fediverse posts

Device Code Phishing is an Evolution in Identity Takeover

Device code phishing attacks have exploded across the threat landscape, with new toolkits emerging weekly. This surge coincides with publicly released criminal toolkits and multiple phishing-as-a-service offerings like EvilTokens and Tycoon. Threat actors abuse the OAuth 2.0 device authorization grant flow to compromise Microsoft 365 and other enterprise accounts by tricking users into authorizing malicious applications. Current implementations use on-demand code generation, addressing the 15-minute expiration limitation of previous techniques. Most activity appears to be generated using AI-based coding techniques. Successful attacks lead to full account takeover, data theft, business email compromise, and potential ransomware deployment. The technique represents the natural evolution of credential phishing as organizations improve their defenses against traditional multifactor authentication bypass methods.

Pulse ID: 6a05af080ae591ea2bf00e87
Pulse Link: https://otx.alienvault.com/pulse/6a05af080ae591ea2bf00e87
Pulse Author: AlienVault
Created: 2026-05-14 11:16:24

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #DataTheft #Email #InfoSec #Microsoft #MultiFactorAuthentication #OTX #OpenThreatExchange #Phishing #RAT #RansomWare #bot #AlienVault

Question to you.

What is a good email solution for non-profits/community groups in the United States?

Base Requirements:
- Emails that use our domain name.
- Allows individual email accounts for users (roughly 20 to 50).
- Allows email aliases / groups to where emailing one email delivers to multiple users (eg [email protected] goes to three specific people or [email protected] goes to those working on the food rescue side, etc)

Ideal requirements:
- Cheap or free
- Privacy / security oriented
- Managed (I don't like the idea of hosting our own email server for example)

Those ideal requirements have some contradiction in it, of course.

So high level, I've looked into:
- Google
- Microsoft
- Proton Mail
- Tutanota
- Mailbox org
- Startmail

Here is the quick overview for those:

Google:
- https(slash)www.google(dot)com/nonprofits/offerings/workspace/#!#workspace-pricing
- Cost: Free
- Con: They actively scan and read all emails. So we become the product.
- Pro: They are used by many non-profits and are well liked from a usability standpoint

Microsoft:
- https(slash)www.microsoft(dot)com/en-us/microsoft-365/business/nonprofit-plans-and-pricing
- Cost: $5.50 per user
- Con: They actively scan and read all emails
- Pro: They have a more robust app offering.
(I don't think we need this level of IT for our group though)

Proton Mail for Non-Profits:
- https://proton.me/business/plans#plans
- Cost: 20% off Business Costs. If we just went with email, it'd be about $5.60 per user per month
- Pro: They are private and secure and can't read emails
- Con: Much less app support but we really just need email for this

Tutanota does not offer non-profit discounts within the US - So it's a similar offering as Proton Mail for about three dollars more per month.

Startmail is also similar in price point and features as Proton and Tutanota

Mailbox(dot)org may be ideal in this space as it's only $1 per user per month. I have to check and see if we can use a custom domain, etc.

Google is free... which matters. You are the product. Also folks know it - the UI is good. Making a cost benefit analysis here, I have to bring up the "we don't have anything to hide" sort of thing. As an individual, that doesn't fly - right. But as a community group / potential non-profit, we are already transparent. None of our communications contain sensitive information. And we have a lot of folks coming in and out as it is.

So, what would the threat scenario around an org using Google for email be?

Any other ideas?

#privacy #email #solarPunk

Gmail account free storage 5GB limit - phone verification now required for 15GB:

https://9to5google.com/2026/05/14/google-account-free-storage-changes-15gb/

#Google #Gmail #email

Vodafone empfiehlt Webmail gegen IMAP-Störungen

Seit Tagen gibt es Störungen bei Mails über Vodafone-Adressen. Das Unternehmen baut seine Technik um und empfiehlt einen Workaround.

https://www.heise.de/news/Vodafone-empfiehlt-Webmail-gegen-IMAP-Stoerungen-11294327.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

#EMail #IMAP #IT #Vodafone #news

if you're sending me a cold email or a cold message, for the love of god, be short and sweet and directly ask what you gotta ask

skip the big words

cut to the chase. prune fluff.

let's not waste each other's time.

please. pretty please.

#colddm #dm #social #email #coldemail #spam #noise

W kolejnej części cyklu Własny Serwer FreeBSD zainstalujemy serwer poczty SMTP. Co to jest serwer SMTP?
Mail Transport Agent (MTA), czyli serwer SMTP służy dwóm celom... https://linuxiarze.pl/wlasny-serwer-freebsd-cz-6-serwer-poczty-smtp/ #bsd #freebsd #server #email

I am so sick of #email.

Email clients are getting worse. Messages aren't being delivered because of "spam filtering". Email providers refuse to explain why messages aren't delivered when the raw email is fine. There is a high percentage of DKIM failures on microsoft-run servers. US government addresses have high rates of DMARC failures. And it is impossible to run your own email server if you care about deliverability.

How is this going to end? Will we fix email, or switch to something else?

Python Backdoor Threat Analysis Following an AI Deepfake Impersonation Campaign

A sophisticated campaign linked to APT37 delivers Python-based backdoors through spear-phishing emails containing malicious LNK files disguised as legitimate documents. Attackers use themes including airline e-tickets, North Korea research invitations, and impersonation of defense and police officials to induce execution. The LNK files employ environment variable-based obfuscation techniques to download additional BAT files, which establish a Python runtime environment and execute compiled Python bytecode disguised with .cat extensions. The malware functions as a remote command execution backdoor, communicating with C2 servers to receive commands and exfiltrate results. Persistence is maintained through scheduled tasks executing at one-minute intervals. The campaign shows strong tactical similarities to previous APT37 operations, including infrastructure patterns, script obfuscation methods, and the abuse of legitimate tools.

Pulse ID: 6a04a9a090a64de310cb0568
Pulse Link: https://otx.alienvault.com/pulse/6a04a9a090a64de310cb0568
Pulse Author: AlienVault
Created: 2026-05-13 16:41:04

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#APT37 #BackDoor #CyberSecurity #Email #InfoSec #Korea #LNK #Malware #NorthKorea #OTX #OpenThreatExchange #Phishing #Python #RAT #RemoteCommandExecution #SpearPhishing #bot #AlienVault

Aster Mail launch mail rules/filters:

Note: The free plan only gets 2 mail rules.

https://www.reddit.com/r/AsterPrivacy/comments/1tchtkp/aster_mail_update_mail_rules_are_here/

#astermail #email

Je ne comprends toujours pas : pourquoi dans #thunderbird lorsque je fais un "répondre à", les coordonnées de mon interlocuteur disparaissent et pas lorsque je transfert son message ?
Si c'est faisable pour l'un, pourquoi pas pour l'autre ? Existe-t-il des courielleurs qui respectent les données des gens et donc les effacent pour un transfert d'email ?
#email

I work with this guy who feels the need to add color commentary to all of his emails and utilizes...for dramatic effect in his messages. Everyone find it off putting and condescending. Long story short, no one wants to read your email. Keep em' short and sweet and people will like you more instantly.

#email #workplace #work #professional

@bluewizard
In case you missed that you have updated your e-mail client... ;)

E-mail client: AMail 0.1.6
Ryan 'bluewizard' Stapleton has released a sixth beta version of AMail, his implementation of a modern e-mail client for AmigaOS 3.2 that supports IMAP and SMTP. E-mails can now be sorted by sender, subject or date.

https://www.amiga-news.de/en/news/AN-2026-05-00056-EN.html

#Amiga #email #IMAP #AmigaOS32

Have you got an MXroute account and want to pay extra for 'Priority Support'?

It'll cost ya! 😮

https://management.mxroute.com/order/305

#mxroute #email

Ich liebe ein gute Konversation.

https://www.alles-bekloppte.de/angebot-ubersetzung-und-lokalisierung-ihrer-website/

#ai #ki #fail #email #spam #fun #funny #aiagent #agenticai

📥 Trousse de secours de l’e-mail #9

Un problème avec la collecte de vos anciens messages vers Mailo ?
Paramètres, accès, configuration… notre guide vous aide à identifier et résoudre les causes les plus fréquentes.

https://blog.mailo.com/blog/trousse-de-secours-de-le-mail-9-ma-collecte-ne-fonctionne-pas-comment-resoudre-ce-souci.htm

#Mailo #Email #Support #Migration #ConseilsPratiques #NumériqueResponsable

Aster Mail have redesigned their 'Contacts' system:

https://www.reddit.com/r/AsterPrivacy/comments/1tbjf61/aster_mail_update_all_new_contact_system/

#astermail #email

Migrating #Email Accounts Using #Imapsync (Quick 5 Minute Guide) This article provides a how-to guide for migrating email accounts using Imapsync.
What is Email Migration?
Email migration is the process of moving email data from one email system, server, or provider to another. This transfer includes emails, folders, attachments, and sometimes other related data like contacts, calendars, and settings.
What is Imapsync?
Imapsync is a ...
Continued 👉 https://blog.radwebhosting.com/migrating-email-accounts-using-imapsync/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #servermigration

Install #Modoboa #Email Server on #Debian VPS (1-Stop Complete Guide)

This article provides a guide to install Modoboa email server on Debian VPS.
Step-by-Step Guide to Install Modoboa on a Debian VPS

Modoboa is a complete mail hosting and management platform that simplifies the deployment of email services. Here’s a step-by-step guide to install and run ...
Continued 👉 https://blog.radwebhosting.com/install-modoboa-email-server-on-debian-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #vpsguide #opensource #mailserver #selfhosted #installguide #letsencrypt #selfhosting

How to Install #Mailwizz on #cPanel #VPS Server This article provides a guide for how to install MailWizz on cPanel VPS server.
What is MailWizz?
MailWizz is a self-hosted #email marketing software that allows businesses and marketers to create, send, and manage email campaigns efficiently. It is a powerful alternative to cloud-based email marketing platforms like Mailchimp, Sendinblue, or GetResponse, but with the advantage of ...
Continued 👉 https://blog.radwebhosting.com/how-to-install-mailwizz-on-cpanel-vps-server/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #mailserver #vpsguide

🙄🙄

#Microsoft #Office365 #EMail #IMAP #SMTP

Anywho this is your free tip to pitch me your favourite #email providers that aren't Google.

If I wanted google I'd have gone with a google workspace several years ago and solved this whole problem before it became one.