Closed Bug 1532587 Opened 6 years ago Closed 6 years ago

I keep receiving email from myself

Categories

(Thunderbird :: Message Compose Window, defect)

defect
Not set
normal

Tracking

(Not tracked)

RESOLVED DUPLICATE of bug 1270282

People

(Reporter: ehodzic, Unassigned)

Details

Attachments

(1 file)

Attached image email.PNG

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36

Steps to reproduce:

  • Edit "From:" address and use custom. Enter the address of the recipient manually.
  • Enter recipient "To:" address
  • Send email
  • It appears to recipient that he received an email from him/herself

Actual results:

I get spam emails from server in Russia. Somebody claims he/she hacked my email and want 1000 USD in bitcoin not to release some data he/she allegedly collected.

Email screenshot attached.

Expected results:

It should not be possible to change sender name and email address.

Unfortunately someone sending to you spoofing YOUR email address (or anyone's) is pretty trivial. You can see some items related to this in https://mzl.la/2EtOyXy But preventing someone from sending with an improper address to a Thunderbird user is not something we can prevent. But you can ask about it at https://support.mozilla.org/en-US/questions/new/thunderbird

As for YOU being able to spoof someone else's address, see resolved Bug 1254666 - "edit as new message" on a received message prefills the sender as the composing identity and unresolved Bug 1270282 - 'customize from address' should be suppress-able

Status: UNCONFIRMED → RESOLVED
Closed: 6 years ago
Component: Security → Message Compose Window
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: