Top websites found to be vulnerable to email spoofing

A Swedish security firm has analysed the top 500 websites ranked by Alexa (a large provider of commercial web traffic data and analytics) and found out that 276 of them are vulnerable to email spoofing. Spoofing, often used by spammers, is when someone sends an email with a forged sender address. As email does not have authentication built in, spam and phishing attackers use spoofing to take advantage of the trust that the spoofed domains carry. According to the firm, the domains identified as being vulnerable to email spoofing either had no authentication configured or had it misconfigured.