Hijacking Hotmail: How Hard is it?

Frijolero · Cadet Joined: Apr 29, 2004 Posts: 1 Location: USA

I am new and was not sure where to post this. So if it is in the wrong forum please advise.

I have some doubts about an email that came into my work email address the other morning (it got me into a lot of trouble). The Internet Header says it came from with in our office. Some things about the email just don't add up (it's a long story).

Let me give you the scenario.

I'm on my home computer composing an email via hotmail. I send it to two recipients here at work. How difficult would it be to make it seem that the email originated from with in the office? Here is the Internet Header from the message.

Received: from smtprelay.graycary.com (10.100.1.250 [10.100.1.250]) by sanims.sd.internal with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2655.55)
id JX2MZGDB; Tue, 27 Apr 2004 07:53:24 -0700
Received: (qmail 23789 invoked by uid 0); 26 Apr 2004 23:55:23 -0000
Received: from unknown (HELO mail30-res-R.bigfish.com) (63.161.60.61)
by 0 with SMTP; 26 Apr 2004 23:55:22 -0000
Received: from mail30-res.bigfish.com (localhost.localdomain [127.0.0.1])
by mail30-res-R.bigfish.com (Postfix) with ESMTP
id AF1BD2C4966; Tue, 27 Apr 2004 14:55:23 +0000 (UCT)
Received: by mail30-res (MessageSwitch) id 1083077717899342_544; Tue, 27 Apr 2004 14:55:17 +0000 (UCT)
Received: from hotmail.com (bay17-f35.bay17.hotmail.com [64.4.43.85])
by mail30-res.bigfish.com (Postfix) with ESMTP
id 5F4B12C41B1; Tue, 27 Apr 2004 14:54:29 +0000 (UCT)
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
Tue, 27 Apr 2004 07:50:10 -0700
Received: from 66.54.170.133 by by17fd.bay17.hotmail.msn.com with HTTP;
Tue, 27 Apr 2004 14:50:10 GMT
X-Originating-IP: [66.54.170.133] (can this IP be spoofed to make it seem that the message was sent internally?)X-Originating-Email: [[email protected]]
X-Sender:
From: "Jessica ???????" <[email protected]>

I would appreciate your help and expertise.


	Home ˇ Topics ˇ Submit News ˇ Top 10 This entire site, Cops Themes, and Computer Cops are Š 2002 - 2004 Computer Cops, LLC. All rights reserved. You can syndicate our news using the file RSS 0.91, ultramode.txt, or RSS 1.0. Acceptable Use Policy. Use signifies your agreement. Engine Copyright Š 2002 by PHP-Nuke, GNU/GPL Licensed. ICRA Member. Paul Laudanski, Member of Computer Cops, LLC Server Load: 1235 pages served in previous 5 minutes. Page Rendered: 0.490 seconds.