---
id: 8336
title: "Facebook message spoofing via SMTP"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/network-pentesting/facebook-message-spoofing-via-smtp/"
published_at: "2012-05-24T00:00:00Z"
tags: ["phishing", "facebook", "email-spoofing", "smtp", "mail-server", "ptr-record"]
phying_url: "https://phying.com/item/8336"
lang: en
---

# Facebook message spoofing via SMTP

## Summary

Facebook's mail server accepted inbound email based only on a valid PTR record, letting attackers spoof external-domain senders and deliver phishing or malware to @facebook.com addresses.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2012-05-24T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/network-pentesting/facebook-message-spoofing-via-smtp/
- **Phying News:** https://phying.com/item/8336