Someone forwarded a spammer's email to Spamnesty, which replied to the email, pretending to be a person called Sarah Yang and starting a conversation.
This is that conversation.
United Bank For Africa Plc
Head Office: 01 BP 2160 Porto-Novo,
Benin Republic
Tel: +229-6242-8811
I have been mandated to inform you that your inheritance/contract fund with our bank is due for release into your nominated bank account.
The audit report given to us, shows that you have been going through hard times to see to the release of your funds USD2.5 MILLION, which has been delayed by some dubious officials. We therefore advise that you stop further communication with any correspondence outside this office. In order to proceed with this transaction, you will be required to contact the agent in-charge ( MR. CHARLES WHITE ) by clicking on Reply button, kindly look below to find appropriate contact immediately after clicking on Reply button information:
CONTACT AGENT NAME: MR. CHARLES WHITE
Phone Number: +229-6242-8811
Kindly give us your contact details such as Stated Below in order to process and send your funds without further delay.
Full Name:
Address:
Bank Account:
Bank Name:
Zip Code:
Direct Contact Number:
Occupation:
IMF organization have ordered the funds recovered to be shared among the 10 Lucky people listed around the World as a compensation/inheritance.Therefore, We would like you to choose below your choice of fund release:
(A) Bank Transfer/Online Banking
(B) Certified Bank Draft/Cheque
(C) ATM Card
(D) Consignment
For and On behalf of:
Christine Lagarde
IMF Managing Directors
Hey there,
Could you tell me where you are located? Also, could you tell me more about your offer?
Sarah Yang
CEO, MNesty, LLC
National Credit Union Administration
Address: 1775 Duke Street, Alexandria,
VA 22314–3428. United State.
Website: www.ncua.gov
Email Only✉: [email protected]
Text me, +1 (5853)919-391
Dear
Sarah Yang
National Credit Union CREDIT Transaction Notification
This Message is from the National Credit Union Alexandria, Virginia, United States, And am contacting you about your funds of $10.7 Million Us Dollars deposited to the United Bank For Africa Plc to transferred the funds to you as Your compensation for Scam Victim because your name and your phone number was listed among the Victims that was scammed years ago by West Africa Countries and now you are to be compensated with the sum of $10.7 Million Us Dollars, Therefore you have to reconfirm your information to them via email such as follows;
Your Full Name:
Your Home Address:
Your Tell Number:
Your Whatsap Nnumber:
Occupation:
Don't Forget To Reply This Email Only✉: [email protected]
And after reconfirming your personal information to Them, Kindly let them know the best way that you wish to have your funds of $10.7 Million Us Dollars to you either the funds will be transferred in your bank account or the funds will be converted to an ATM MASTER CARD and it will be delivered to your home address or the funds will be delivered to you in Cash.
If You receive this message in spam, kindly know that it is a network problem.
Best regards:
Mr. Todd M. Harper
National Credit Union Administration
1775 Duke Street Alexandria, VA 22314
Hello,
That is very interesting! Could you elaborate? Do you have any details online I could look at?
Sarah Yang
CEO, MNesty, LLC
Hi Stephanie,
Can I send you my whatsapp number? Or skype? And we would discuss everything opn call.
Sincerely,Rahat
On Tue, 23 Feb 2021 at 23:51, Stephanie Yang <[email protected]> wrote:
Hi,
Great, thanks. Could we have a short call to discuss the specifics? What are your contact details? Also, what is your pricing model like?
Stephanie Yang
CEO, MNesty, LLC
On 23/02/2021 18:50 PM, Rahat Ali wrote:
> Sent: Tuesday, February 23, 2021 3:06 AM
>
> To: gcagent <[email protected]>; [email protected]; [email protected]; [email protected]; [email protected]; Brown, David <[email protected]
>
> Subject: Re: Bug report (5) SMPT Protection not used, I can hijack your email server
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
>
>
> Rahat
>
>
>
>
>
> On Tue, 26 Jan 2021, 12:23 am Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Mon, 18 Jan 2021 at 21:04, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Sun, 10 Jan 2021 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 5 Jan 2021 at 01:47, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Mon, 23 Nov 2020 at 12:43, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 10 Nov 2020, 10:07 pm Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Sun, 8 Nov 2020 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
>
> Hi Team,
>
>
>
>
>
> I found a Vulnerability in https://www.daybreakgames.com/
>
>
>
>
>
>
> Vulnerability Type: SMPT Protection not used, I can hijack your email server.
>
>
>
>
>
>
>
>
> Severity: Critical
>
>
>
>
>
>
> Description
>
> Companies like Coinbase, Yahoo,Google,Facebook and even hackerone implemented a strict email security policy (combining SPF,
> DKIM, and DMARC but I don't see that from daybreakgames.com/ ,
> You should apply strict SMPT policy to stop spoofed email sending from your domain.
>
> Exploit scenario:
>
> An attacker would send a Fake email from saying that Please change your password, The victim is aware of phishing attacks, But when he sees that the mail originated from
>
>
> , He has
> no other way than to believe it. Clicking on the link takes him to a website where certain JavaScript is executed which steals his bl.ink id and password (SESSION
> COOKIE). The results can be more dangerous.
>
> POC is also attached you can also see that i can use your domain name email and can send the mail to any of the user of bl.ink
>
> Proof of concept:
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> How to Fix:
>
>
>
>
>
>
>
>
> To fully implement your SPF policy, there is only one step left, adding it to the DNS record for the domain. Log in to control the name server. If you don’t know where that is,
> the default name server from the domain registrar (such as GoDaddy and NameCheap) is probably used and that is where you should log in to manage the DNS records.
>
>
>
>
>
> A TXT record should now be added with the value of the selected SPF policy. In many cases, the SPF policy needs to be placed within quotes.
>
>
>
>
>
> I Hope you will fix the issue as soon as possible. Looking forward to hear from you. Thank you
>
>
>
>
>
>
>
> Sincerely,
>
>
>
> Rahat
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> The information in this email message may be confidential and/or privileged and is intended only for use by the individual or entity to whom it is addressed. Any unauthorized disclosure, copying, distribution or use of any of the information contained in or
> attached to this message is strictly prohibited. If you have received this email message in error, please notify us immediately and securely delete this email and any attachments.
>
>
>
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Wed, 24 Feb 2021, 12:44 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Can I send you my whatsapp number? Or skype? And we would discuss everything opn call.
Sincerely,Rahat
On Tue, 23 Feb 2021 at 23:51, Stephanie Yang <[email protected]> wrote:
Hi,
Great, thanks. Could we have a short call to discuss the specifics? What are your contact details? Also, what is your pricing model like?
Stephanie Yang
CEO, MNesty, LLC
On 23/02/2021 18:50 PM, Rahat Ali wrote:
> Sent: Tuesday, February 23, 2021 3:06 AM
>
> To: gcagent <[email protected]>; [email protected]; [email protected]; [email protected]; [email protected]; Brown, David <[email protected]
>
> Subject: Re: Bug report (5) SMPT Protection not used, I can hijack your email server
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
>
>
> Rahat
>
>
>
>
>
> On Tue, 26 Jan 2021, 12:23 am Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Mon, 18 Jan 2021 at 21:04, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Sun, 10 Jan 2021 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 5 Jan 2021 at 01:47, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Mon, 23 Nov 2020 at 12:43, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 10 Nov 2020, 10:07 pm Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Sun, 8 Nov 2020 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
>
> Hi Team,
>
>
>
>
>
> I found a Vulnerability in https://www.daybreakgames.com/
>
>
>
>
>
>
> Vulnerability Type: SMPT Protection not used, I can hijack your email server.
>
>
>
>
>
>
>
>
> Severity: Critical
>
>
>
>
>
>
> Description
>
> Companies like Coinbase, Yahoo,Google,Facebook and even hackerone implemented a strict email security policy (combining SPF,
> DKIM, and DMARC but I don't see that from daybreakgames.com/ ,
> You should apply strict SMPT policy to stop spoofed email sending from your domain.
>
> Exploit scenario:
>
> An attacker would send a Fake email from saying that Please change your password, The victim is aware of phishing attacks, But when he sees that the mail originated from
>
>
> , He has
> no other way than to believe it. Clicking on the link takes him to a website where certain JavaScript is executed which steals his bl.ink id and password (SESSION
> COOKIE). The results can be more dangerous.
>
> POC is also attached you can also see that i can use your domain name email and can send the mail to any of the user of bl.ink
>
> Proof of concept:
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> How to Fix:
>
>
>
>
>
>
>
>
> To fully implement your SPF policy, there is only one step left, adding it to the DNS record for the domain. Log in to control the name server. If you don’t know where that is,
> the default name server from the domain registrar (such as GoDaddy and NameCheap) is probably used and that is where you should log in to manage the DNS records.
>
>
>
>
>
> A TXT record should now be added with the value of the selected SPF policy. In many cases, the SPF policy needs to be placed within quotes.
>
>
>
>
>
> I Hope you will fix the issue as soon as possible. Looking forward to hear from you. Thank you
>
>
>
>
>
>
>
> Sincerely,
>
>
>
> Rahat
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> The information in this email message may be confidential and/or privileged and is intended only for use by the individual or entity to whom it is addressed. Any unauthorized disclosure, copying, distribution or use of any of the information contained in or
> attached to this message is strictly prohibited. If you have received this email message in error, please notify us immediately and securely delete this email and any attachments.
>
>
>
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 8 Mar 2021, 12:08 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Wed, 24 Feb 2021, 12:44 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Can I send you my whatsapp number? Or skype? And we would discuss everything opn call.
Sincerely,Rahat
On Tue, 23 Feb 2021 at 23:51, Stephanie Yang <[email protected]> wrote:
Hi,
Great, thanks. Could we have a short call to discuss the specifics? What are your contact details? Also, what is your pricing model like?
Stephanie Yang
CEO, MNesty, LLC
On 23/02/2021 18:50 PM, Rahat Ali wrote:
> Sent: Tuesday, February 23, 2021 3:06 AM
>
> To: gcagent <[email protected]>; [email protected]; [email protected]; [email protected]; [email protected]; Brown, David <[email protected]
>
> Subject: Re: Bug report (5) SMPT Protection not used, I can hijack your email server
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
>
>
> Rahat
>
>
>
>
>
> On Tue, 26 Jan 2021, 12:23 am Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Mon, 18 Jan 2021 at 21:04, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Sun, 10 Jan 2021 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 5 Jan 2021 at 01:47, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Mon, 23 Nov 2020 at 12:43, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 10 Nov 2020, 10:07 pm Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Sun, 8 Nov 2020 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
>
> Hi Team,
>
>
>
>
>
> I found a Vulnerability in https://www.daybreakgames.com/
>
>
>
>
>
>
> Vulnerability Type: SMPT Protection not used, I can hijack your email server.
>
>
>
>
>
>
>
>
> Severity: Critical
>
>
>
>
>
>
> Description
>
> Companies like Coinbase, Yahoo,Google,Facebook and even hackerone implemented a strict email security policy (combining SPF,
> DKIM, and DMARC but I don't see that from daybreakgames.com/ ,
> You should apply strict SMPT policy to stop spoofed email sending from your domain.
>
> Exploit scenario:
>
> An attacker would send a Fake email from saying that Please change your password, The victim is aware of phishing attacks, But when he sees that the mail originated from
>
>
> , He has
> no other way than to believe it. Clicking on the link takes him to a website where certain JavaScript is executed which steals his bl.ink id and password (SESSION
> COOKIE). The results can be more dangerous.
>
> POC is also attached you can also see that i can use your domain name email and can send the mail to any of the user of bl.ink
>
> Proof of concept:
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> How to Fix:
>
>
>
>
>
>
>
>
> To fully implement your SPF policy, there is only one step left, adding it to the DNS record for the domain. Log in to control the name server. If you don’t know where that is,
> the default name server from the domain registrar (such as GoDaddy and NameCheap) is probably used and that is where you should log in to manage the DNS records.
>
>
>
>
>
> A TXT record should now be added with the value of the selected SPF policy. In many cases, the SPF policy needs to be placed within quotes.
>
>
>
>
>
> I Hope you will fix the issue as soon as possible. Looking forward to hear from you. Thank you
>
>
>
>
>
>
>
> Sincerely,
>
>
>
> Rahat
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> The information in this email message may be confidential and/or privileged and is intended only for use by the individual or entity to whom it is addressed. Any unauthorized disclosure, copying, distribution or use of any of the information contained in or
> attached to this message is strictly prohibited. If you have received this email message in error, please notify us immediately and securely delete this email and any attachments.
>
>
>
Hi Stephanie,
I hope you are doing well. I did not hear any word again from you. Please just let me know are you interested in my services or not?
Looking forward to your response.
Sincerely,Rahat
On Mon, 15 Mar 2021 at 10:46, Rahat Ali <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 8 Mar 2021, 12:08 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Wed, 24 Feb 2021, 12:44 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Can I send you my whatsapp number? Or skype? And we would discuss everything opn call.
Sincerely,Rahat
On Tue, 23 Feb 2021 at 23:51, Stephanie Yang <[email protected]> wrote:
Hi,
Great, thanks. Could we have a short call to discuss the specifics? What are your contact details? Also, what is your pricing model like?
Stephanie Yang
CEO, MNesty, LLC
On 23/02/2021 18:50 PM, Rahat Ali wrote:
> Sent: Tuesday, February 23, 2021 3:06 AM
>
> To: gcagent <[email protected]>; [email protected]; [email protected]; [email protected]; [email protected]; Brown, David <[email protected]
>
> Subject: Re: Bug report (5) SMPT Protection not used, I can hijack your email server
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
>
>
> Rahat
>
>
>
>
>
> On Tue, 26 Jan 2021, 12:23 am Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Mon, 18 Jan 2021 at 21:04, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Sun, 10 Jan 2021 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 5 Jan 2021 at 01:47, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Mon, 23 Nov 2020 at 12:43, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 10 Nov 2020, 10:07 pm Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Sun, 8 Nov 2020 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
>
> Hi Team,
>
>
>
>
>
> I found a Vulnerability in https://www.daybreakgames.com/
>
>
>
>
>
>
> Vulnerability Type: SMPT Protection not used, I can hijack your email server.
>
>
>
>
>
>
>
>
> Severity: Critical
>
>
>
>
>
>
> Description
>
> Companies like Coinbase, Yahoo,Google,Facebook and even hackerone implemented a strict email security policy (combining SPF,
> DKIM, and DMARC but I don't see that from daybreakgames.com/ ,
> You should apply strict SMPT policy to stop spoofed email sending from your domain.
>
> Exploit scenario:
>
> An attacker would send a Fake email from saying that Please change your password, The victim is aware of phishing attacks, But when he sees that the mail originated from
>
>
> , He has
> no other way than to believe it. Clicking on the link takes him to a website where certain JavaScript is executed which steals his bl.ink id and password (SESSION
> COOKIE). The results can be more dangerous.
>
> POC is also attached you can also see that i can use your domain name email and can send the mail to any of the user of bl.ink
>
> Proof of concept:
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> How to Fix:
>
>
>
>
>
>
>
>
> To fully implement your SPF policy, there is only one step left, adding it to the DNS record for the domain. Log in to control the name server. If you don’t know where that is,
> the default name server from the domain registrar (such as GoDaddy and NameCheap) is probably used and that is where you should log in to manage the DNS records.
>
>
>
>
>
> A TXT record should now be added with the value of the selected SPF policy. In many cases, the SPF policy needs to be placed within quotes.
>
>
>
>
>
> I Hope you will fix the issue as soon as possible. Looking forward to hear from you. Thank you
>
>
>
>
>
>
>
> Sincerely,
>
>
>
> Rahat
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> The information in this email message may be confidential and/or privileged and is intended only for use by the individual or entity to whom it is addressed. Any unauthorized disclosure, copying, distribution or use of any of the information contained in or
> attached to this message is strictly prohibited. If you have received this email message in error, please notify us immediately and securely delete this email and any attachments.
>
>
>
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Wed, 17 Mar 2021, 9:20 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
I hope you are doing well. I did not hear any word again from you. Please just let me know are you interested in my services or not?
Looking forward to your response.
Sincerely,Rahat
On Mon, 15 Mar 2021 at 10:46, Rahat Ali <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 8 Mar 2021, 12:08 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Wed, 24 Feb 2021, 12:44 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Can I send you my whatsapp number? Or skype? And we would discuss everything opn call.
Sincerely,Rahat
On Tue, 23 Feb 2021 at 23:51, Stephanie Yang <[email protected]> wrote:
Hi,
Great, thanks. Could we have a short call to discuss the specifics? What are your contact details? Also, what is your pricing model like?
Stephanie Yang
CEO, MNesty, LLC
On 23/02/2021 18:50 PM, Rahat Ali wrote:
> Sent: Tuesday, February 23, 2021 3:06 AM
>
> To: gcagent <[email protected]>; [email protected]; [email protected]; [email protected]; [email protected]; Brown, David <[email protected]
>
> Subject: Re: Bug report (5) SMPT Protection not used, I can hijack your email server
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
>
>
> Rahat
>
>
>
>
>
> On Tue, 26 Jan 2021, 12:23 am Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Mon, 18 Jan 2021 at 21:04, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Sun, 10 Jan 2021 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 5 Jan 2021 at 01:47, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Mon, 23 Nov 2020 at 12:43, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 10 Nov 2020, 10:07 pm Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Sun, 8 Nov 2020 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
>
> Hi Team,
>
>
>
>
>
> I found a Vulnerability in https://www.daybreakgames.com/
>
>
>
>
>
>
> Vulnerability Type: SMPT Protection not used, I can hijack your email server.
>
>
>
>
>
>
>
>
> Severity: Critical
>
>
>
>
>
>
> Description
>
> Companies like Coinbase, Yahoo,Google,Facebook and even hackerone implemented a strict email security policy (combining SPF,
> DKIM, and DMARC but I don't see that from daybreakgames.com/ ,
> You should apply strict SMPT policy to stop spoofed email sending from your domain.
>
> Exploit scenario:
>
> An attacker would send a Fake email from saying that Please change your password, The victim is aware of phishing attacks, But when he sees that the mail originated from
>
>
> , He has
> no other way than to believe it. Clicking on the link takes him to a website where certain JavaScript is executed which steals his bl.ink id and password (SESSION
> COOKIE). The results can be more dangerous.
>
> POC is also attached you can also see that i can use your domain name email and can send the mail to any of the user of bl.ink
>
> Proof of concept:
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> How to Fix:
>
>
>
>
>
>
>
>
> To fully implement your SPF policy, there is only one step left, adding it to the DNS record for the domain. Log in to control the name server. If you don’t know where that is,
> the default name server from the domain registrar (such as GoDaddy and NameCheap) is probably used and that is where you should log in to manage the DNS records.
>
>
>
>
>
> A TXT record should now be added with the value of the selected SPF policy. In many cases, the SPF policy needs to be placed within quotes.
>
>
>
>
>
> I Hope you will fix the issue as soon as possible. Looking forward to hear from you. Thank you
>
>
>
>
>
>
>
> Sincerely,
>
>
>
> Rahat
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> The information in this email message may be confidential and/or privileged and is intended only for use by the individual or entity to whom it is addressed. Any unauthorized disclosure, copying, distribution or use of any of the information contained in or
> attached to this message is strictly prohibited. If you have received this email message in error, please notify us immediately and securely delete this email and any attachments.
>
>
>
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 22 Mar 2021, 11:03 am Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Wed, 17 Mar 2021, 9:20 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
I hope you are doing well. I did not hear any word again from you. Please just let me know are you interested in my services or not?
Looking forward to your response.
Sincerely,Rahat
On Mon, 15 Mar 2021 at 10:46, Rahat Ali <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 8 Mar 2021, 12:08 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Wed, 24 Feb 2021, 12:44 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Can I send you my whatsapp number? Or skype? And we would discuss everything opn call.
Sincerely,Rahat
On Tue, 23 Feb 2021 at 23:51, Stephanie Yang <[email protected]> wrote:
Hi,
Great, thanks. Could we have a short call to discuss the specifics? What are your contact details? Also, what is your pricing model like?
Stephanie Yang
CEO, MNesty, LLC
On 23/02/2021 18:50 PM, Rahat Ali wrote:
> Sent: Tuesday, February 23, 2021 3:06 AM
>
> To: gcagent <[email protected]>; [email protected]; [email protected]; [email protected]; [email protected]; Brown, David <[email protected]
>
> Subject: Re: Bug report (5) SMPT Protection not used, I can hijack your email server
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
>
>
> Rahat
>
>
>
>
>
> On Tue, 26 Jan 2021, 12:23 am Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Mon, 18 Jan 2021 at 21:04, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Sun, 10 Jan 2021 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 5 Jan 2021 at 01:47, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Mon, 23 Nov 2020 at 12:43, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 10 Nov 2020, 10:07 pm Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Sun, 8 Nov 2020 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
>
> Hi Team,
>
>
>
>
>
> I found a Vulnerability in https://www.daybreakgames.com/
>
>
>
>
>
>
> Vulnerability Type: SMPT Protection not used, I can hijack your email server.
>
>
>
>
>
>
>
>
> Severity: Critical
>
>
>
>
>
>
> Description
>
> Companies like Coinbase, Yahoo,Google,Facebook and even hackerone implemented a strict email security policy (combining SPF,
> DKIM, and DMARC but I don't see that from daybreakgames.com/ ,
> You should apply strict SMPT policy to stop spoofed email sending from your domain.
>
> Exploit scenario:
>
> An attacker would send a Fake email from saying that Please change your password, The victim is aware of phishing attacks, But when he sees that the mail originated from
>
>
> , He has
> no other way than to believe it. Clicking on the link takes him to a website where certain JavaScript is executed which steals his bl.ink id and password (SESSION
> COOKIE). The results can be more dangerous.
>
> POC is also attached you can also see that i can use your domain name email and can send the mail to any of the user of bl.ink
>
> Proof of concept:
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> How to Fix:
>
>
>
>
>
>
>
>
> To fully implement your SPF policy, there is only one step left, adding it to the DNS record for the domain. Log in to control the name server. If you don’t know where that is,
> the default name server from the domain registrar (such as GoDaddy and NameCheap) is probably used and that is where you should log in to manage the DNS records.
>
>
>
>
>
> A TXT record should now be added with the value of the selected SPF policy. In many cases, the SPF policy needs to be placed within quotes.
>
>
>
>
>
> I Hope you will fix the issue as soon as possible. Looking forward to hear from you. Thank you
>
>
>
>
>
>
>
> Sincerely,
>
>
>
> Rahat
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> The information in this email message may be confidential and/or privileged and is intended only for use by the individual or entity to whom it is addressed. Any unauthorized disclosure, copying, distribution or use of any of the information contained in or
> attached to this message is strictly prohibited. If you have received this email message in error, please notify us immediately and securely delete this email and any attachments.
>
>
>
Hi Stephanie,
Any updates?
On Mon, 29 Mar 2021 at 10:24, Rahat Ali <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 22 Mar 2021, 11:03 am Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Wed, 17 Mar 2021, 9:20 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
I hope you are doing well. I did not hear any word again from you. Please just let me know are you interested in my services or not?
Looking forward to your response.
Sincerely,Rahat
On Mon, 15 Mar 2021 at 10:46, Rahat Ali <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 8 Mar 2021, 12:08 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Wed, 24 Feb 2021, 12:44 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Can I send you my whatsapp number? Or skype? And we would discuss everything opn call.
Sincerely,Rahat
On Tue, 23 Feb 2021 at 23:51, Stephanie Yang <[email protected]> wrote:
Hi,
Great, thanks. Could we have a short call to discuss the specifics? What are your contact details? Also, what is your pricing model like?
Stephanie Yang
CEO, MNesty, LLC
On 23/02/2021 18:50 PM, Rahat Ali wrote:
> Sent: Tuesday, February 23, 2021 3:06 AM
>
> To: gcagent <[email protected]>; [email protected]; [email protected]; [email protected]; [email protected]; Brown, David <[email protected]
>
> Subject: Re: Bug report (5) SMPT Protection not used, I can hijack your email server
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
>
>
> Rahat
>
>
>
>
>
> On Tue, 26 Jan 2021, 12:23 am Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Mon, 18 Jan 2021 at 21:04, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Sun, 10 Jan 2021 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 5 Jan 2021 at 01:47, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Mon, 23 Nov 2020 at 12:43, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 10 Nov 2020, 10:07 pm Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Sun, 8 Nov 2020 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
>
> Hi Team,
>
>
>
>
>
> I found a Vulnerability in https://www.daybreakgames.com/
>
>
>
>
>
>
> Vulnerability Type: SMPT Protection not used, I can hijack your email server.
>
>
>
>
>
>
>
>
> Severity: Critical
>
>
>
>
>
>
> Description
>
> Companies like Coinbase, Yahoo,Google,Facebook and even hackerone implemented a strict email security policy (combining SPF,
> DKIM, and DMARC but I don't see that from daybreakgames.com/ ,
> You should apply strict SMPT policy to stop spoofed email sending from your domain.
>
> Exploit scenario:
>
> An attacker would send a Fake email from saying that Please change your password, The victim is aware of phishing attacks, But when he sees that the mail originated from
>
>
> , He has
> no other way than to believe it. Clicking on the link takes him to a website where certain JavaScript is executed which steals his bl.ink id and password (SESSION
> COOKIE). The results can be more dangerous.
>
> POC is also attached you can also see that i can use your domain name email and can send the mail to any of the user of bl.ink
>
> Proof of concept:
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> How to Fix:
>
>
>
>
>
>
>
>
> To fully implement your SPF policy, there is only one step left, adding it to the DNS record for the domain. Log in to control the name server. If you don’t know where that is,
> the default name server from the domain registrar (such as GoDaddy and NameCheap) is probably used and that is where you should log in to manage the DNS records.
>
>
>
>
>
> A TXT record should now be added with the value of the selected SPF policy. In many cases, the SPF policy needs to be placed within quotes.
>
>
>
>
>
> I Hope you will fix the issue as soon as possible. Looking forward to hear from you. Thank you
>
>
>
>
>
>
>
> Sincerely,
>
>
>
> Rahat
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> The information in this email message may be confidential and/or privileged and is intended only for use by the individual or entity to whom it is addressed. Any unauthorized disclosure, copying, distribution or use of any of the information contained in or
> attached to this message is strictly prohibited. If you have received this email message in error, please notify us immediately and securely delete this email and any attachments.
>
>
>
Hi Stephanie,
Any updates?
On Mon, 29 Mar 2021, 10:57 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates?
On Mon, 29 Mar 2021 at 10:24, Rahat Ali <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 22 Mar 2021, 11:03 am Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Wed, 17 Mar 2021, 9:20 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
I hope you are doing well. I did not hear any word again from you. Please just let me know are you interested in my services or not?
Looking forward to your response.
Sincerely,Rahat
On Mon, 15 Mar 2021 at 10:46, Rahat Ali <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 8 Mar 2021, 12:08 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Wed, 24 Feb 2021, 12:44 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Can I send you my whatsapp number? Or skype? And we would discuss everything opn call.
Sincerely,Rahat
On Tue, 23 Feb 2021 at 23:51, Stephanie Yang <[email protected]> wrote:
Hi,
Great, thanks. Could we have a short call to discuss the specifics? What are your contact details? Also, what is your pricing model like?
Stephanie Yang
CEO, MNesty, LLC
On 23/02/2021 18:50 PM, Rahat Ali wrote:
> Sent: Tuesday, February 23, 2021 3:06 AM
>
> To: gcagent <[email protected]>; [email protected]; [email protected]; [email protected]; [email protected]; Brown, David <[email protected]
>
> Subject: Re: Bug report (5) SMPT Protection not used, I can hijack your email server
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
>
>
> Rahat
>
>
>
>
>
> On Tue, 26 Jan 2021, 12:23 am Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Mon, 18 Jan 2021 at 21:04, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Sun, 10 Jan 2021 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 5 Jan 2021 at 01:47, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Mon, 23 Nov 2020 at 12:43, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 10 Nov 2020, 10:07 pm Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Sun, 8 Nov 2020 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
>
> Hi Team,
>
>
>
>
>
> I found a Vulnerability in https://www.daybreakgames.com/
>
>
>
>
>
>
> Vulnerability Type: SMPT Protection not used, I can hijack your email server.
>
>
>
>
>
>
>
>
> Severity: Critical
>
>
>
>
>
>
> Description
>
> Companies like Coinbase, Yahoo,Google,Facebook and even hackerone implemented a strict email security policy (combining SPF,
> DKIM, and DMARC but I don't see that from daybreakgames.com/ ,
> You should apply strict SMPT policy to stop spoofed email sending from your domain.
>
> Exploit scenario:
>
> An attacker would send a Fake email from saying that Please change your password, The victim is aware of phishing attacks, But when he sees that the mail originated from
>
>
> , He has
> no other way than to believe it. Clicking on the link takes him to a website where certain JavaScript is executed which steals his bl.ink id and password (SESSION
> COOKIE). The results can be more dangerous.
>
> POC is also attached you can also see that i can use your domain name email and can send the mail to any of the user of bl.ink
>
> Proof of concept:
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> How to Fix:
>
>
>
>
>
>
>
>
> To fully implement your SPF policy, there is only one step left, adding it to the DNS record for the domain. Log in to control the name server. If you don’t know where that is,
> the default name server from the domain registrar (such as GoDaddy and NameCheap) is probably used and that is where you should log in to manage the DNS records.
>
>
>
>
>
> A TXT record should now be added with the value of the selected SPF policy. In many cases, the SPF policy needs to be placed within quotes.
>
>
>
>
>
> I Hope you will fix the issue as soon as possible. Looking forward to hear from you. Thank you
>
>
>
>
>
>
>
> Sincerely,
>
>
>
> Rahat
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> The information in this email message may be confidential and/or privileged and is intended only for use by the individual or entity to whom it is addressed. Any unauthorized disclosure, copying, distribution or use of any of the information contained in or
> attached to this message is strictly prohibited. If you have received this email message in error, please notify us immediately and securely delete this email and any attachments.
>
>
>
Hi Team,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 19 Apr 2021, 2:23 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates?
On Mon, 29 Mar 2021, 10:57 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates?
On Mon, 29 Mar 2021 at 10:24, Rahat Ali <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 22 Mar 2021, 11:03 am Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Wed, 17 Mar 2021, 9:20 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
I hope you are doing well. I did not hear any word again from you. Please just let me know are you interested in my services or not?
Looking forward to your response.
Sincerely,Rahat
On Mon, 15 Mar 2021 at 10:46, Rahat Ali <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 8 Mar 2021, 12:08 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Wed, 24 Feb 2021, 12:44 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Can I send you my whatsapp number? Or skype? And we would discuss everything opn call.
Sincerely,Rahat
On Tue, 23 Feb 2021 at 23:51, Stephanie Yang <[email protected]> wrote:
Hi,
Great, thanks. Could we have a short call to discuss the specifics? What are your contact details? Also, what is your pricing model like?
Stephanie Yang
CEO, MNesty, LLC
On 23/02/2021 18:50 PM, Rahat Ali wrote:
> Sent: Tuesday, February 23, 2021 3:06 AM
>
> To: gcagent <[email protected]>; [email protected]; [email protected]; [email protected]; [email protected]; Brown, David <[email protected]
>
> Subject: Re: Bug report (5) SMPT Protection not used, I can hijack your email server
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
>
>
> Rahat
>
>
>
>
>
> On Tue, 26 Jan 2021, 12:23 am Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Mon, 18 Jan 2021 at 21:04, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Sun, 10 Jan 2021 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 5 Jan 2021 at 01:47, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Mon, 23 Nov 2020 at 12:43, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 10 Nov 2020, 10:07 pm Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Sun, 8 Nov 2020 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
>
> Hi Team,
>
>
>
>
>
> I found a Vulnerability in https://www.daybreakgames.com/
>
>
>
>
>
>
> Vulnerability Type: SMPT Protection not used, I can hijack your email server.
>
>
>
>
>
>
>
>
> Severity: Critical
>
>
>
>
>
>
> Description
>
> Companies like Coinbase, Yahoo,Google,Facebook and even hackerone implemented a strict email security policy (combining SPF,
> DKIM, and DMARC but I don't see that from daybreakgames.com/ ,
> You should apply strict SMPT policy to stop spoofed email sending from your domain.
>
> Exploit scenario:
>
> An attacker would send a Fake email from saying that Please change your password, The victim is aware of phishing attacks, But when he sees that the mail originated from
>
>
> , He has
> no other way than to believe it. Clicking on the link takes him to a website where certain JavaScript is executed which steals his bl.ink id and password (SESSION
> COOKIE). The results can be more dangerous.
>
> POC is also attached you can also see that i can use your domain name email and can send the mail to any of the user of bl.ink
>
> Proof of concept:
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> How to Fix:
>
>
>
>
>
>
>
>
> To fully implement your SPF policy, there is only one step left, adding it to the DNS record for the domain. Log in to control the name server. If you don’t know where that is,
> the default name server from the domain registrar (such as GoDaddy and NameCheap) is probably used and that is where you should log in to manage the DNS records.
>
>
>
>
>
> A TXT record should now be added with the value of the selected SPF policy. In many cases, the SPF policy needs to be placed within quotes.
>
>
>
>
>
> I Hope you will fix the issue as soon as possible. Looking forward to hear from you. Thank you
>
>
>
>
>
>
>
> Sincerely,
>
>
>
> Rahat
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> The information in this email message may be confidential and/or privileged and is intended only for use by the individual or entity to whom it is addressed. Any unauthorized disclosure, copying, distribution or use of any of the information contained in or
> attached to this message is strictly prohibited. If you have received this email message in error, please notify us immediately and securely delete this email and any attachments.
>
>
>
Hi Stephanie,
Any updates regarding my above email? I did not hear any word again from you
Looking forward to your response.
Sincerely,
Rahat
On Mon, 26 Apr 2021 at 15:06, Rahat Ali <[email protected]> wrote:
Hi Team,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 19 Apr 2021, 2:23 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates?
On Mon, 29 Mar 2021, 10:57 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates?
On Mon, 29 Mar 2021 at 10:24, Rahat Ali <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 22 Mar 2021, 11:03 am Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Wed, 17 Mar 2021, 9:20 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
I hope you are doing well. I did not hear any word again from you. Please just let me know are you interested in my services or not?
Looking forward to your response.
Sincerely,Rahat
On Mon, 15 Mar 2021 at 10:46, Rahat Ali <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 8 Mar 2021, 12:08 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Wed, 24 Feb 2021, 12:44 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Can I send you my whatsapp number? Or skype? And we would discuss everything opn call.
Sincerely,Rahat
On Tue, 23 Feb 2021 at 23:51, Stephanie Yang <[email protected]> wrote:
Hi,
Great, thanks. Could we have a short call to discuss the specifics? What are your contact details? Also, what is your pricing model like?
Stephanie Yang
CEO, MNesty, LLC
On 23/02/2021 18:50 PM, Rahat Ali wrote:
> Sent: Tuesday, February 23, 2021 3:06 AM
>
> To: gcagent <[email protected]>; [email protected]; [email protected]; [email protected]; [email protected]; Brown, David <[email protected]
>
> Subject: Re: Bug report (5) SMPT Protection not used, I can hijack your email server
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
>
>
> Rahat
>
>
>
>
>
> On Tue, 26 Jan 2021, 12:23 am Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Mon, 18 Jan 2021 at 21:04, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Sun, 10 Jan 2021 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 5 Jan 2021 at 01:47, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Mon, 23 Nov 2020 at 12:43, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 10 Nov 2020, 10:07 pm Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Sun, 8 Nov 2020 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
>
> Hi Team,
>
>
>
>
>
> I found a Vulnerability in https://www.daybreakgames.com/
>
>
>
>
>
>
> Vulnerability Type: SMPT Protection not used, I can hijack your email server.
>
>
>
>
>
>
>
>
> Severity: Critical
>
>
>
>
>
>
> Description
>
> Companies like Coinbase, Yahoo,Google,Facebook and even hackerone implemented a strict email security policy (combining SPF,
> DKIM, and DMARC but I don't see that from daybreakgames.com/ ,
> You should apply strict SMPT policy to stop spoofed email sending from your domain.
>
> Exploit scenario:
>
> An attacker would send a Fake email from saying that Please change your password, The victim is aware of phishing attacks, But when he sees that the mail originated from
>
>
> , He has
> no other way than to believe it. Clicking on the link takes him to a website where certain JavaScript is executed which steals his bl.ink id and password (SESSION
> COOKIE). The results can be more dangerous.
>
> POC is also attached you can also see that i can use your domain name email and can send the mail to any of the user of bl.ink
>
> Proof of concept:
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> How to Fix:
>
>
>
>
>
>
>
>
> To fully implement your SPF policy, there is only one step left, adding it to the DNS record for the domain. Log in to control the name server. If you don’t know where that is,
> the default name server from the domain registrar (such as GoDaddy and NameCheap) is probably used and that is where you should log in to manage the DNS records.
>
>
>
>
>
> A TXT record should now be added with the value of the selected SPF policy. In many cases, the SPF policy needs to be placed within quotes.
>
>
>
>
>
> I Hope you will fix the issue as soon as possible. Looking forward to hear from you. Thank you
>
>
>
>
>
>
>
> Sincerely,
>
>
>
> Rahat
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> The information in this email message may be confidential and/or privileged and is intended only for use by the individual or entity to whom it is addressed. Any unauthorized disclosure, copying, distribution or use of any of the information contained in or
> attached to this message is strictly prohibited. If you have received this email message in error, please notify us immediately and securely delete this email and any attachments.
>
>
>
Hi Stephanie,
Any updates regarding my above email? I did not hear any word again from you
Looking forward to your response.
Sincerely,
Rahat
On Sat, 1 May 2021 at 03:25, Rahat Ali <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email? I did not hear any word again from you
Looking forward to your response.
Sincerely,
Rahat
On Mon, 26 Apr 2021 at 15:06, Rahat Ali <[email protected]> wrote:
Hi Team,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 19 Apr 2021, 2:23 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates?
On Mon, 29 Mar 2021, 10:57 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates?
On Mon, 29 Mar 2021 at 10:24, Rahat Ali <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 22 Mar 2021, 11:03 am Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Wed, 17 Mar 2021, 9:20 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
I hope you are doing well. I did not hear any word again from you. Please just let me know are you interested in my services or not?
Looking forward to your response.
Sincerely,Rahat
On Mon, 15 Mar 2021 at 10:46, Rahat Ali <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 8 Mar 2021, 12:08 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Wed, 24 Feb 2021, 12:44 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Can I send you my whatsapp number? Or skype? And we would discuss everything opn call.
Sincerely,Rahat
On Tue, 23 Feb 2021 at 23:51, Stephanie Yang <[email protected]> wrote:
Hi,
Great, thanks. Could we have a short call to discuss the specifics? What are your contact details? Also, what is your pricing model like?
Stephanie Yang
CEO, MNesty, LLC
On 23/02/2021 18:50 PM, Rahat Ali wrote:
> Sent: Tuesday, February 23, 2021 3:06 AM
>
> To: gcagent <[email protected]>; [email protected]; [email protected]; [email protected]; [email protected]; Brown, David <[email protected]
>
> Subject: Re: Bug report (5) SMPT Protection not used, I can hijack your email server
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
>
>
> Rahat
>
>
>
>
>
> On Tue, 26 Jan 2021, 12:23 am Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Mon, 18 Jan 2021 at 21:04, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Sun, 10 Jan 2021 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 5 Jan 2021 at 01:47, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Mon, 23 Nov 2020 at 12:43, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 10 Nov 2020, 10:07 pm Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Sun, 8 Nov 2020 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
>
> Hi Team,
>
>
>
>
>
> I found a Vulnerability in https://www.daybreakgames.com/
>
>
>
>
>
>
> Vulnerability Type: SMPT Protection not used, I can hijack your email server.
>
>
>
>
>
>
>
>
> Severity: Critical
>
>
>
>
>
>
> Description
>
> Companies like Coinbase, Yahoo,Google,Facebook and even hackerone implemented a strict email security policy (combining SPF,
> DKIM, and DMARC but I don't see that from daybreakgames.com/ ,
> You should apply strict SMPT policy to stop spoofed email sending from your domain.
>
> Exploit scenario:
>
> An attacker would send a Fake email from saying that Please change your password, The victim is aware of phishing attacks, But when he sees that the mail originated from
>
>
> , He has
> no other way than to believe it. Clicking on the link takes him to a website where certain JavaScript is executed which steals his bl.ink id and password (SESSION
> COOKIE). The results can be more dangerous.
>
> POC is also attached you can also see that i can use your domain name email and can send the mail to any of the user of bl.ink
>
> Proof of concept:
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> How to Fix:
>
>
>
>
>
>
>
>
> To fully implement your SPF policy, there is only one step left, adding it to the DNS record for the domain. Log in to control the name server. If you don’t know where that is,
> the default name server from the domain registrar (such as GoDaddy and NameCheap) is probably used and that is where you should log in to manage the DNS records.
>
>
>
>
>
> A TXT record should now be added with the value of the selected SPF policy. In many cases, the SPF policy needs to be placed within quotes.
>
>
>
>
>
> I Hope you will fix the issue as soon as possible. Looking forward to hear from you. Thank you
>
>
>
>
>
>
>
> Sincerely,
>
>
>
> Rahat
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> The information in this email message may be confidential and/or privileged and is intended only for use by the individual or entity to whom it is addressed. Any unauthorized disclosure, copying, distribution or use of any of the information contained in or
> attached to this message is strictly prohibited. If you have received this email message in error, please notify us immediately and securely delete this email and any attachments.
>
>
>
HI,
I hope you are doing well, I am very upset with your unprofessional behavior. This is not a way of treating a person who helped you in making your platform more secure for users.
Please update me regarding my reward
Looking forward to your response
SIncerely
Rahat
On Mon, 17 May 2021 at 10:00, Rahat Ali <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email? I did not hear any word again from you
Looking forward to your response.
Sincerely,
Rahat
On Sat, 1 May 2021 at 03:25, Rahat Ali <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email? I did not hear any word again from you
Looking forward to your response.
Sincerely,
Rahat
On Mon, 26 Apr 2021 at 15:06, Rahat Ali <[email protected]> wrote:
Hi Team,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 19 Apr 2021, 2:23 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates?
On Mon, 29 Mar 2021, 10:57 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates?
On Mon, 29 Mar 2021 at 10:24, Rahat Ali <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 22 Mar 2021, 11:03 am Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Wed, 17 Mar 2021, 9:20 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
I hope you are doing well. I did not hear any word again from you. Please just let me know are you interested in my services or not?
Looking forward to your response.
Sincerely,Rahat
On Mon, 15 Mar 2021 at 10:46, Rahat Ali <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 8 Mar 2021, 12:08 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Wed, 24 Feb 2021, 12:44 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Can I send you my whatsapp number? Or skype? And we would discuss everything opn call.
Sincerely,Rahat
On Tue, 23 Feb 2021 at 23:51, Stephanie Yang <[email protected]> wrote:
Hi,
Great, thanks. Could we have a short call to discuss the specifics? What are your contact details? Also, what is your pricing model like?
Stephanie Yang
CEO, MNesty, LLC
On 23/02/2021 18:50 PM, Rahat Ali wrote:
> Sent: Tuesday, February 23, 2021 3:06 AM
>
> To: gcagent <[email protected]>; [email protected]; [email protected]; [email protected]; [email protected]; Brown, David <[email protected]
>
> Subject: Re: Bug report (5) SMPT Protection not used, I can hijack your email server
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
>
>
> Rahat
>
>
>
>
>
> On Tue, 26 Jan 2021, 12:23 am Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Mon, 18 Jan 2021 at 21:04, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Sun, 10 Jan 2021 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 5 Jan 2021 at 01:47, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Mon, 23 Nov 2020 at 12:43, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 10 Nov 2020, 10:07 pm Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Sun, 8 Nov 2020 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
>
> Hi Team,
>
>
>
>
>
> I found a Vulnerability in https://www.daybreakgames.com/
>
>
>
>
>
>
> Vulnerability Type: SMPT Protection not used, I can hijack your email server.
>
>
>
>
>
>
>
>
> Severity: Critical
>
>
>
>
>
>
> Description
>
> Companies like Coinbase, Yahoo,Google,Facebook and even hackerone implemented a strict email security policy (combining SPF,
> DKIM, and DMARC but I don't see that from daybreakgames.com/ ,
> You should apply strict SMPT policy to stop spoofed email sending from your domain.
>
> Exploit scenario:
>
> An attacker would send a Fake email from saying that Please change your password, The victim is aware of phishing attacks, But when he sees that the mail originated from
>
>
> , He has
> no other way than to believe it. Clicking on the link takes him to a website where certain JavaScript is executed which steals his bl.ink id and password (SESSION
> COOKIE). The results can be more dangerous.
>
> POC is also attached you can also see that i can use your domain name email and can send the mail to any of the user of bl.ink
>
> Proof of concept:
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> How to Fix:
>
>
>
>
>
>
>
>
> To fully implement your SPF policy, there is only one step left, adding it to the DNS record for the domain. Log in to control the name server. If you don’t know where that is,
> the default name server from the domain registrar (such as GoDaddy and NameCheap) is probably used and that is where you should log in to manage the DNS records.
>
>
>
>
>
> A TXT record should now be added with the value of the selected SPF policy. In many cases, the SPF policy needs to be placed within quotes.
>
>
>
>
>
> I Hope you will fix the issue as soon as possible. Looking forward to hear from you. Thank you
>
>
>
>
>
>
>
> Sincerely,
>
>
>
> Rahat
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> The information in this email message may be confidential and/or privileged and is intended only for use by the individual or entity to whom it is addressed. Any unauthorized disclosure, copying, distribution or use of any of the information contained in or
> attached to this message is strictly prohibited. If you have received this email message in error, please notify us immediately and securely delete this email and any attachments.
>
>
>
Hi Team,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 24 May 2021 at 14:37, Rahat Ali <[email protected]> wrote:
HI,
I hope you are doing well, I am very upset with your unprofessional behavior. This is not a way of treating a person who helped you in making your platform more secure for users.
Please update me regarding my reward
Looking forward to your response
SIncerely
Rahat
On Mon, 17 May 2021 at 10:00, Rahat Ali <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email? I did not hear any word again from you
Looking forward to your response.
Sincerely,
Rahat
On Sat, 1 May 2021 at 03:25, Rahat Ali <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email? I did not hear any word again from you
Looking forward to your response.
Sincerely,
Rahat
On Mon, 26 Apr 2021 at 15:06, Rahat Ali <[email protected]> wrote:
Hi Team,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 19 Apr 2021, 2:23 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates?
On Mon, 29 Mar 2021, 10:57 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates?
On Mon, 29 Mar 2021 at 10:24, Rahat Ali <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 22 Mar 2021, 11:03 am Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Wed, 17 Mar 2021, 9:20 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
I hope you are doing well. I did not hear any word again from you. Please just let me know are you interested in my services or not?
Looking forward to your response.
Sincerely,Rahat
On Mon, 15 Mar 2021 at 10:46, Rahat Ali <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 8 Mar 2021, 12:08 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Wed, 24 Feb 2021, 12:44 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Can I send you my whatsapp number? Or skype? And we would discuss everything opn call.
Sincerely,Rahat
On Tue, 23 Feb 2021 at 23:51, Stephanie Yang <[email protected]> wrote:
Hi,
Great, thanks. Could we have a short call to discuss the specifics? What are your contact details? Also, what is your pricing model like?
Stephanie Yang
CEO, MNesty, LLC
On 23/02/2021 18:50 PM, Rahat Ali wrote:
> Sent: Tuesday, February 23, 2021 3:06 AM
>
> To: gcagent <[email protected]>; [email protected]; [email protected]; [email protected]; [email protected]; Brown, David <[email protected]
>
> Subject: Re: Bug report (5) SMPT Protection not used, I can hijack your email server
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
>
>
> Rahat
>
>
>
>
>
> On Tue, 26 Jan 2021, 12:23 am Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Mon, 18 Jan 2021 at 21:04, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Sun, 10 Jan 2021 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 5 Jan 2021 at 01:47, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Mon, 23 Nov 2020 at 12:43, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 10 Nov 2020, 10:07 pm Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Sun, 8 Nov 2020 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
>
> Hi Team,
>
>
>
>
>
> I found a Vulnerability in https://www.daybreakgames.com/
>
>
>
>
>
>
> Vulnerability Type: SMPT Protection not used, I can hijack your email server.
>
>
>
>
>
>
>
>
> Severity: Critical
>
>
>
>
>
>
> Description
>
> Companies like Coinbase, Yahoo,Google,Facebook and even hackerone implemented a strict email security policy (combining SPF,
> DKIM, and DMARC but I don't see that from daybreakgames.com/ ,
> You should apply strict SMPT policy to stop spoofed email sending from your domain.
>
> Exploit scenario:
>
> An attacker would send a Fake email from saying that Please change your password, The victim is aware of phishing attacks, But when he sees that the mail originated from
>
>
> , He has
> no other way than to believe it. Clicking on the link takes him to a website where certain JavaScript is executed which steals his bl.ink id and password (SESSION
> COOKIE). The results can be more dangerous.
>
> POC is also attached you can also see that i can use your domain name email and can send the mail to any of the user of bl.ink
>
> Proof of concept:
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> How to Fix:
>
>
>
>
>
>
>
>
> To fully implement your SPF policy, there is only one step left, adding it to the DNS record for the domain. Log in to control the name server. If you don’t know where that is,
> the default name server from the domain registrar (such as GoDaddy and NameCheap) is probably used and that is where you should log in to manage the DNS records.
>
>
>
>
>
> A TXT record should now be added with the value of the selected SPF policy. In many cases, the SPF policy needs to be placed within quotes.
>
>
>
>
>
> I Hope you will fix the issue as soon as possible. Looking forward to hear from you. Thank you
>
>
>
>
>
>
>
> Sincerely,
>
>
>
> Rahat
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> The information in this email message may be confidential and/or privileged and is intended only for use by the individual or entity to whom it is addressed. Any unauthorized disclosure, copying, distribution or use of any of the information contained in or
> attached to this message is strictly prohibited. If you have received this email message in error, please notify us immediately and securely delete this email and any attachments.
>
>
>
Hi Team,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 31 May 2021 at 14:57, Rahat Ali <[email protected]> wrote:
Hi Team,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 24 May 2021 at 14:37, Rahat Ali <[email protected]> wrote:
HI,
I hope you are doing well, I am very upset with your unprofessional behavior. This is not a way of treating a person who helped you in making your platform more secure for users.
Please update me regarding my reward
Looking forward to your response
SIncerely
Rahat
On Mon, 17 May 2021 at 10:00, Rahat Ali <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email? I did not hear any word again from you
Looking forward to your response.
Sincerely,
Rahat
On Sat, 1 May 2021 at 03:25, Rahat Ali <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email? I did not hear any word again from you
Looking forward to your response.
Sincerely,
Rahat
On Mon, 26 Apr 2021 at 15:06, Rahat Ali <[email protected]> wrote:
Hi Team,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 19 Apr 2021, 2:23 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates?
On Mon, 29 Mar 2021, 10:57 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates?
On Mon, 29 Mar 2021 at 10:24, Rahat Ali <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 22 Mar 2021, 11:03 am Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Wed, 17 Mar 2021, 9:20 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
I hope you are doing well. I did not hear any word again from you. Please just let me know are you interested in my services or not?
Looking forward to your response.
Sincerely,Rahat
On Mon, 15 Mar 2021 at 10:46, Rahat Ali <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 8 Mar 2021, 12:08 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Wed, 24 Feb 2021, 12:44 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Can I send you my whatsapp number? Or skype? And we would discuss everything opn call.
Sincerely,Rahat
On Tue, 23 Feb 2021 at 23:51, Stephanie Yang <[email protected]> wrote:
Hi,
Great, thanks. Could we have a short call to discuss the specifics? What are your contact details? Also, what is your pricing model like?
Stephanie Yang
CEO, MNesty, LLC
On 23/02/2021 18:50 PM, Rahat Ali wrote:
> Sent: Tuesday, February 23, 2021 3:06 AM
>
> To: gcagent <[email protected]>; [email protected]; [email protected]; [email protected]; [email protected]; Brown, David <[email protected]
>
> Subject: Re: Bug report (5) SMPT Protection not used, I can hijack your email server
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
>
>
> Rahat
>
>
>
>
>
> On Tue, 26 Jan 2021, 12:23 am Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Mon, 18 Jan 2021 at 21:04, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Sun, 10 Jan 2021 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 5 Jan 2021 at 01:47, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Mon, 23 Nov 2020 at 12:43, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 10 Nov 2020, 10:07 pm Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Sun, 8 Nov 2020 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
>
> Hi Team,
>
>
>
>
>
> I found a Vulnerability in https://www.daybreakgames.com/
>
>
>
>
>
>
> Vulnerability Type: SMPT Protection not used, I can hijack your email server.
>
>
>
>
>
>
>
>
> Severity: Critical
>
>
>
>
>
>
> Description
>
> Companies like Coinbase, Yahoo,Google,Facebook and even hackerone implemented a strict email security policy (combining SPF,
> DKIM, and DMARC but I don't see that from daybreakgames.com/ ,
> You should apply strict SMPT policy to stop spoofed email sending from your domain.
>
> Exploit scenario:
>
> An attacker would send a Fake email from saying that Please change your password, The victim is aware of phishing attacks, But when he sees that the mail originated from
>
>
> , He has
> no other way than to believe it. Clicking on the link takes him to a website where certain JavaScript is executed which steals his bl.ink id and password (SESSION
> COOKIE). The results can be more dangerous.
>
> POC is also attached you can also see that i can use your domain name email and can send the mail to any of the user of bl.ink
>
> Proof of concept:
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> How to Fix:
>
>
>
>
>
>
>
>
> To fully implement your SPF policy, there is only one step left, adding it to the DNS record for the domain. Log in to control the name server. If you don’t know where that is,
> the default name server from the domain registrar (such as GoDaddy and NameCheap) is probably used and that is where you should log in to manage the DNS records.
>
>
>
>
>
> A TXT record should now be added with the value of the selected SPF policy. In many cases, the SPF policy needs to be placed within quotes.
>
>
>
>
>
> I Hope you will fix the issue as soon as possible. Looking forward to hear from you. Thank you
>
>
>
>
>
>
>
> Sincerely,
>
>
>
> Rahat
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> The information in this email message may be confidential and/or privileged and is intended only for use by the individual or entity to whom it is addressed. Any unauthorized disclosure, copying, distribution or use of any of the information contained in or
> attached to this message is strictly prohibited. If you have received this email message in error, please notify us immediately and securely delete this email and any attachments.
>
>
>
Hi Team,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 7 Jun 2021 at 15:46, Rahat Ali <[email protected]> wrote:
Hi Team,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 31 May 2021 at 14:57, Rahat Ali <[email protected]> wrote:
Hi Team,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 24 May 2021 at 14:37, Rahat Ali <[email protected]> wrote:
HI,
I hope you are doing well, I am very upset with your unprofessional behavior. This is not a way of treating a person who helped you in making your platform more secure for users.
Please update me regarding my reward
Looking forward to your response
SIncerely
Rahat
On Mon, 17 May 2021 at 10:00, Rahat Ali <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email? I did not hear any word again from you
Looking forward to your response.
Sincerely,
Rahat
On Sat, 1 May 2021 at 03:25, Rahat Ali <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email? I did not hear any word again from you
Looking forward to your response.
Sincerely,
Rahat
On Mon, 26 Apr 2021 at 15:06, Rahat Ali <[email protected]> wrote:
Hi Team,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 19 Apr 2021, 2:23 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates?
On Mon, 29 Mar 2021, 10:57 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates?
On Mon, 29 Mar 2021 at 10:24, Rahat Ali <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 22 Mar 2021, 11:03 am Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Wed, 17 Mar 2021, 9:20 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
I hope you are doing well. I did not hear any word again from you. Please just let me know are you interested in my services or not?
Looking forward to your response.
Sincerely,Rahat
On Mon, 15 Mar 2021 at 10:46, Rahat Ali <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 8 Mar 2021, 12:08 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Wed, 24 Feb 2021, 12:44 pm Rahat Ali, <[email protected]> wrote:
Hi Stephanie,
Can I send you my whatsapp number? Or skype? And we would discuss everything opn call.
Sincerely,Rahat
On Tue, 23 Feb 2021 at 23:51, Stephanie Yang <[email protected]> wrote:
Hi,
Great, thanks. Could we have a short call to discuss the specifics? What are your contact details? Also, what is your pricing model like?
Stephanie Yang
CEO, MNesty, LLC
On 23/02/2021 18:50 PM, Rahat Ali wrote:
> Sent: Tuesday, February 23, 2021 3:06 AM
>
> To: gcagent <[email protected]>; [email protected]; [email protected]; [email protected]; [email protected]; Brown, David <[email protected]
>
> Subject: Re: Bug report (5) SMPT Protection not used, I can hijack your email server
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
>
>
> Rahat
>
>
>
>
>
> On Tue, 26 Jan 2021, 12:23 am Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Mon, 18 Jan 2021 at 21:04, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Sun, 10 Jan 2021 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 5 Jan 2021 at 01:47, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Mon, 23 Nov 2020 at 12:43, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 10 Nov 2020, 10:07 pm Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Sun, 8 Nov 2020 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
>
> Hi Team,
>
>
>
>
>
> I found a Vulnerability in https://www.daybreakgames.com/
>
>
>
>
>
>
> Vulnerability Type: SMPT Protection not used, I can hijack your email server.
>
>
>
>
>
>
>
>
> Severity: Critical
>
>
>
>
>
>
> Description
>
> Companies like Coinbase, Yahoo,Google,Facebook and even hackerone implemented a strict email security policy (combining SPF,
> DKIM, and DMARC but I don't see that from daybreakgames.com/ ,
> You should apply strict SMPT policy to stop spoofed email sending from your domain.
>
> Exploit scenario:
>
> An attacker would send a Fake email from saying that Please change your password, The victim is aware of phishing attacks, But when he sees that the mail originated from
>
>
> , He has
> no other way than to believe it. Clicking on the link takes him to a website where certain JavaScript is executed which steals his bl.ink id and password (SESSION
> COOKIE). The results can be more dangerous.
>
> POC is also attached you can also see that i can use your domain name email and can send the mail to any of the user of bl.ink
>
> Proof of concept:
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> How to Fix:
>
>
>
>
>
>
>
>
> To fully implement your SPF policy, there is only one step left, adding it to the DNS record for the domain. Log in to control the name server. If you don’t know where that is,
> the default name server from the domain registrar (such as GoDaddy and NameCheap) is probably used and that is where you should log in to manage the DNS records.
>
>
>
>
>
> A TXT record should now be added with the value of the selected SPF policy. In many cases, the SPF policy needs to be placed within quotes.
>
>
>
>
>
> I Hope you will fix the issue as soon as possible. Looking forward to hear from you. Thank you
>
>
>
>
>
>
>
> Sincerely,
>
>
>
> Rahat
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> The information in this email message may be confidential and/or privileged and is intended only for use by the individual or entity to whom it is addressed. Any unauthorized disclosure, copying, distribution or use of any of the information contained in or
> attached to this message is strictly prohibited. If you have received this email message in error, please notify us immediately and securely delete this email and any attachments.
>
>
>
Hi Stephanie,
I hope this email finds you well, Any updates regarding my submitted vulnerability reports? I don't know why are you not replying. I just send you some vulnerabilities that was my mistake, Now I take your silence as a silence consent and going to disclose all my findings publicly for educational purpose.
Thanks.
Sincerely,
Rahat
On Tue, 23 Feb 2021, 11:51 pm Stephanie Yang, <[email protected]> wrote:
Hi,
Great, thanks. Could we have a short call to discuss the specifics? What are your contact details? Also, what is your pricing model like?
Stephanie Yang
CEO, MNesty, LLC
On 23/02/2021 18:50 PM, Rahat Ali wrote:
> Sent: Tuesday, February 23, 2021 3:06 AM
>
> To: gcagent <[email protected]>; [email protected]; [email protected]; [email protected]; [email protected]; Brown, David <[email protected]
>
> Subject: Re: Bug report (5) SMPT Protection not used, I can hijack your email server
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
>
>
> Rahat
>
>
>
>
>
> On Tue, 26 Jan 2021, 12:23 am Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Mon, 18 Jan 2021 at 21:04, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Sun, 10 Jan 2021 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 5 Jan 2021 at 01:47, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Mon, 23 Nov 2020 at 12:43, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 10 Nov 2020, 10:07 pm Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Sun, 8 Nov 2020 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
>
> Hi Team,
>
>
>
>
>
> I found a Vulnerability in https://www.daybreakgames.com/
>
>
>
>
>
>
> Vulnerability Type: SMPT Protection not used, I can hijack your email server.
>
>
>
>
>
>
>
>
> Severity: Critical
>
>
>
>
>
>
> Description
>
> Companies like Coinbase, Yahoo,Google,Facebook and even hackerone implemented a strict email security policy (combining SPF,
> DKIM, and DMARC but I don't see that from daybreakgames.com/ ,
> You should apply strict SMPT policy to stop spoofed email sending from your domain.
>
> Exploit scenario:
>
> An attacker would send a Fake email from saying that Please change your password, The victim is aware of phishing attacks, But when he sees that the mail originated from
>
>
> , He has
> no other way than to believe it. Clicking on the link takes him to a website where certain JavaScript is executed which steals his bl.ink id and password (SESSION
> COOKIE). The results can be more dangerous.
>
> POC is also attached you can also see that i can use your domain name email and can send the mail to any of the user of bl.ink
>
> Proof of concept:
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> How to Fix:
>
>
>
>
>
>
>
>
> To fully implement your SPF policy, there is only one step left, adding it to the DNS record for the domain. Log in to control the name server. If you don’t know where that is,
> the default name server from the domain registrar (such as GoDaddy and NameCheap) is probably used and that is where you should log in to manage the DNS records.
>
>
>
>
>
> A TXT record should now be added with the value of the selected SPF policy. In many cases, the SPF policy needs to be placed within quotes.
>
>
>
>
>
> I Hope you will fix the issue as soon as possible. Looking forward to hear from you. Thank you
>
>
>
>
>
>
>
> Sincerely,
>
>
>
> Rahat
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> The information in this email message may be confidential and/or privileged and is intended only for use by the individual or entity to whom it is addressed. Any unauthorized disclosure, copying, distribution or use of any of the information contained in or
> attached to this message is strictly prohibited. If you have received this email message in error, please notify us immediately and securely delete this email and any attachments.
>
>
>
Hello,
Can you give me some more info about what you're offering? Specifically, how does it apply to our business? How can we use this?
Sarah Yang
CEO, MNesty, LLC
What is the best option for you to call skype, whatsapp or something else. We will discuss further about price model on call.
On Tue, Feb 23, 2021 at 11:51 PM Stephanie Yang <[email protected]> wrote:
Hi,
Great, thanks. Could we have a short call to discuss the specifics? What are your contact details? Also, what is your pricing model like?
Stephanie Yang
CEO, MNesty, LLC
On 23/02/2021 18:50 PM, Rahat Ali wrote:
> Sent: Tuesday, February 23, 2021 3:06 AM
>
> To: gcagent <[email protected]>; [email protected]; [email protected]; [email protected]; [email protected]; Brown, David <[email protected]
>
> Subject: Re: Bug report (5) SMPT Protection not used, I can hijack your email server
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
>
>
> Rahat
>
>
>
>
>
> On Tue, 26 Jan 2021, 12:23 am Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Mon, 18 Jan 2021 at 21:04, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Sun, 10 Jan 2021 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 5 Jan 2021 at 01:47, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Mon, 23 Nov 2020 at 12:43, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 10 Nov 2020, 10:07 pm Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Sun, 8 Nov 2020 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
>
> Hi Team,
>
>
>
>
>
> I found a Vulnerability in https://www.daybreakgames.com/
>
>
>
>
>
>
> Vulnerability Type: SMPT Protection not used, I can hijack your email server.
>
>
>
>
>
>
>
>
> Severity: Critical
>
>
>
>
>
>
> Description
>
> Companies like Coinbase, Yahoo,Google,Facebook and even hackerone implemented a strict email security policy (combining SPF,
> DKIM, and DMARC but I don't see that from daybreakgames.com/ ,
> You should apply strict SMPT policy to stop spoofed email sending from your domain.
>
> Exploit scenario:
>
> An attacker would send a Fake email from saying that Please change your password, The victim is aware of phishing attacks, But when he sees that the mail originated from
>
>
> , He has
> no other way than to believe it. Clicking on the link takes him to a website where certain JavaScript is executed which steals his bl.ink id and password (SESSION
> COOKIE). The results can be more dangerous.
>
> POC is also attached you can also see that i can use your domain name email and can send the mail to any of the user of bl.ink
>
> Proof of concept:
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> How to Fix:
>
>
>
>
>
>
>
>
> To fully implement your SPF policy, there is only one step left, adding it to the DNS record for the domain. Log in to control the name server. If you don’t know where that is,
> the default name server from the domain registrar (such as GoDaddy and NameCheap) is probably used and that is where you should log in to manage the DNS records.
>
>
>
>
>
> A TXT record should now be added with the value of the selected SPF policy. In many cases, the SPF policy needs to be placed within quotes.
>
>
>
>
>
> I Hope you will fix the issue as soon as possible. Looking forward to hear from you. Thank you
>
>
>
>
>
>
>
> Sincerely,
>
>
>
> Rahat
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> The information in this email message may be confidential and/or privileged and is intended only for use by the individual or entity to whom it is addressed. Any unauthorized disclosure, copying, distribution or use of any of the information contained in or
> attached to this message is strictly prohibited. If you have received this email message in error, please notify us immediately and securely delete this email and any attachments.
>
>
>
You can apply this using DMARC and reject policy to fix this. Furthermore more this vulnerability can loss business and reputation loss because an attacker can send an email using your domain. This is the dangerous attack.
On Thu, Jun 17, 2021 at 3:47 PM Rahat Ali <[email protected]> wrote:
What is the best option for you to call skype, whatsapp or something else. We will discuss further about price model on call.
On Tue, Feb 23, 2021 at 11:51 PM Stephanie Yang <[email protected]> wrote:
Hi,
Great, thanks. Could we have a short call to discuss the specifics? What are your contact details? Also, what is your pricing model like?
Stephanie Yang
CEO, MNesty, LLC
On 23/02/2021 18:50 PM, Rahat Ali wrote:
> Sent: Tuesday, February 23, 2021 3:06 AM
>
> To: gcagent <[email protected]>; [email protected]; [email protected]; [email protected]; [email protected]; Brown, David <[email protected]
>
> Subject: Re: Bug report (5) SMPT Protection not used, I can hijack your email server
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
>
>
> Rahat
>
>
>
>
>
> On Tue, 26 Jan 2021, 12:23 am Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Mon, 18 Jan 2021 at 21:04, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Sun, 10 Jan 2021 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 5 Jan 2021 at 01:47, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Mon, 23 Nov 2020 at 12:43, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 10 Nov 2020, 10:07 pm Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Sun, 8 Nov 2020 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
>
> Hi Team,
>
>
>
>
>
> I found a Vulnerability in https://www.daybreakgames.com/
>
>
>
>
>
>
> Vulnerability Type: SMPT Protection not used, I can hijack your email server.
>
>
>
>
>
>
>
>
> Severity: Critical
>
>
>
>
>
>
> Description
>
> Companies like Coinbase, Yahoo,Google,Facebook and even hackerone implemented a strict email security policy (combining SPF,
> DKIM, and DMARC but I don't see that from daybreakgames.com/ ,
> You should apply strict SMPT policy to stop spoofed email sending from your domain.
>
> Exploit scenario:
>
> An attacker would send a Fake email from saying that Please change your password, The victim is aware of phishing attacks, But when he sees that the mail originated from
>
>
> , He has
> no other way than to believe it. Clicking on the link takes him to a website where certain JavaScript is executed which steals his bl.ink id and password (SESSION
> COOKIE). The results can be more dangerous.
>
> POC is also attached you can also see that i can use your domain name email and can send the mail to any of the user of bl.ink
>
> Proof of concept:
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> How to Fix:
>
>
>
>
>
>
>
>
> To fully implement your SPF policy, there is only one step left, adding it to the DNS record for the domain. Log in to control the name server. If you don’t know where that is,
> the default name server from the domain registrar (such as GoDaddy and NameCheap) is probably used and that is where you should log in to manage the DNS records.
>
>
>
>
>
> A TXT record should now be added with the value of the selected SPF policy. In many cases, the SPF policy needs to be placed within quotes.
>
>
>
>
>
> I Hope you will fix the issue as soon as possible. Looking forward to hear from you. Thank you
>
>
>
>
>
>
>
> Sincerely,
>
>
>
> Rahat
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> The information in this email message may be confidential and/or privileged and is intended only for use by the individual or entity to whom it is addressed. Any unauthorized disclosure, copying, distribution or use of any of the information contained in or
> attached to this message is strictly prohibited. If you have received this email message in error, please notify us immediately and securely delete this email and any attachments.
>
>
>
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Thu, 17 Jun 2021 at 15:49, Rahat Ali <[email protected]> wrote:
You can apply this using DMARC and reject policy to fix this. Furthermore more this vulnerability can loss business and reputation loss because an attacker can send an email using your domain. This is the dangerous attack.
On Thu, Jun 17, 2021 at 3:47 PM Rahat Ali <[email protected]> wrote:
What is the best option for you to call skype, whatsapp or something else. We will discuss further about price model on call.
On Tue, Feb 23, 2021 at 11:51 PM Stephanie Yang <[email protected]> wrote:
Hi,
Great, thanks. Could we have a short call to discuss the specifics? What are your contact details? Also, what is your pricing model like?
Stephanie Yang
CEO, MNesty, LLC
On 23/02/2021 18:50 PM, Rahat Ali wrote:
> Sent: Tuesday, February 23, 2021 3:06 AM
>
> To: gcagent <[email protected]>; [email protected]; [email protected]; [email protected]; [email protected]; Brown, David <[email protected]
>
> Subject: Re: Bug report (5) SMPT Protection not used, I can hijack your email server
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
>
>
> Rahat
>
>
>
>
>
> On Tue, 26 Jan 2021, 12:23 am Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Mon, 18 Jan 2021 at 21:04, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Sun, 10 Jan 2021 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 5 Jan 2021 at 01:47, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Mon, 23 Nov 2020 at 12:43, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 10 Nov 2020, 10:07 pm Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Sun, 8 Nov 2020 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
>
> Hi Team,
>
>
>
>
>
> I found a Vulnerability in https://www.daybreakgames.com/
>
>
>
>
>
>
> Vulnerability Type: SMPT Protection not used, I can hijack your email server.
>
>
>
>
>
>
>
>
> Severity: Critical
>
>
>
>
>
>
> Description
>
> Companies like Coinbase, Yahoo,Google,Facebook and even hackerone implemented a strict email security policy (combining SPF,
> DKIM, and DMARC but I don't see that from daybreakgames.com/ ,
> You should apply strict SMPT policy to stop spoofed email sending from your domain.
>
> Exploit scenario:
>
> An attacker would send a Fake email from saying that Please change your password, The victim is aware of phishing attacks, But when he sees that the mail originated from
>
>
> , He has
> no other way than to believe it. Clicking on the link takes him to a website where certain JavaScript is executed which steals his bl.ink id and password (SESSION
> COOKIE). The results can be more dangerous.
>
> POC is also attached you can also see that i can use your domain name email and can send the mail to any of the user of bl.ink
>
> Proof of concept:
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> How to Fix:
>
>
>
>
>
>
>
>
> To fully implement your SPF policy, there is only one step left, adding it to the DNS record for the domain. Log in to control the name server. If you don’t know where that is,
> the default name server from the domain registrar (such as GoDaddy and NameCheap) is probably used and that is where you should log in to manage the DNS records.
>
>
>
>
>
> A TXT record should now be added with the value of the selected SPF policy. In many cases, the SPF policy needs to be placed within quotes.
>
>
>
>
>
> I Hope you will fix the issue as soon as possible. Looking forward to hear from you. Thank you
>
>
>
>
>
>
>
> Sincerely,
>
>
>
> Rahat
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> The information in this email message may be confidential and/or privileged and is intended only for use by the individual or entity to whom it is addressed. Any unauthorized disclosure, copying, distribution or use of any of the information contained in or
> attached to this message is strictly prohibited. If you have received this email message in error, please notify us immediately and securely delete this email and any attachments.
>
>
>
Hello Steven Yang, We are a leading software Development and IT Services Company headquartered in Texas Houston; offering services for the Health industries. For almost two decades of experience with numerous clients for their software development, IT support and staffing projects.
We are offering lower rates for our staffing services as a few projects have been shelved amid the ongoing global situation. Please see the list of immediately available resources below. Resources with other skill sets can be provided with a lead time of 1-2 weeks.
1. Java (18 resources) 2. Angular JS (14) 3. React (13) 4. PHP (7) 5. .Net (5) 6. QA (6) 7. Technical Writers (5) 8. Android Developer (8) 9. iOS Developer (7) Rates vary from USD 2,000 to USD 3,000 per month depending on the skillset and experience. If you’d like a fixed quote for our development services, please share the project details. We’ll be happy to get on a call if you have any questions or would like to discuss in more detail, please visit https://www.simublade.com/
Best Regards,Shivam Pandey.Business Head
Hi,
Great, thanks. Could we have a short call to discuss the specifics? What are your contact details? Also, what is your pricing model like?
Sarah Yang
CEO, MNesty, LLC
National Credit Union Administration
Address: 1775 Duke Street, Alexandria,
VA 22314–3428. United States.
Website: www.ncua.gov
Email Only✉: [email protected]
Text or Call; +1 202-850-0010
National Credit Union CREDIT Transaction Notification
This Message is from the National Credit Union Alexandria, Virginia, United States, And am contacting you about your funds of $10.7 Million Us Dollars deposited to the United Bank For Africa Plc to transferred the funds to you as Your compensation for Scam Victim because your name and your phone number was listed among the Victims that was scammed years ago by West Africa Countries and now you are to be compensated with the sum of $10.7 Million Us Dollars, Therefore you have to reconfirm your information to them via email such as follows;
Your Full Name:
Your Home Address:
Your Tell Number:
Your Whatsap Nnumber:
Occupation:
Don't Forget To Reply This Email Only✉: [email protected]
And after reconfirming your personal information to Them, Kindly let them know the best way that you wish to have your funds of $10.7 Million Us Dollars to you either the funds will be transferred in your bank account or the funds will be converted to an ATM MASTER CARD and it will be delivered to your home address or the funds will be delivered to you in Cash.
If You receive this message in spam, kindly know that it is a network problem.
Best regards:
Mr. Todd M. Harper
National Credit Union Administration
1775 Duke Street Alexandria, VA 22314
Hi,
Great, thanks. Could we have a short call to discuss the specifics? What are your contact details? Also, what is your pricing model like?
Sarah Yang
CEO, MNesty, LLC
Hello Steve yang happy valentine I have a request I will be glad if u can grant my my request get back to me a soon as possible
QUINLAN, ED
PRESIDENT
BASEBALL ONTARIOsent from my iPhone
On Wed, 2 Feb 2022 at 5:45 PM, Steven Yang <[email protected]> wrote:
Hello,
Can you give me some more info about what you're offering? Specifically, how does it apply to our business? How can we use this?
Steven Yang
CEO, MNesty, LLC
On 02/02/2022 16:45 PM, ED wrote:
> Sent: February 1, 2022 7:35 PM
>
> To:
>
> Subject: ED
>
>
>
>
> Do you have a moment I have a request I need you to handle d. I am going into a meeting now, no calls so just reply my email....
>
>
>
>
>
>
>
>
>
> ED
>
>
>
>
>
>
>
>
>
>
>
>
Hey there,
Could you tell me where you are located? Also, could you tell me more about your offer?
Sarah Yang
CEO, MNesty, LLC
I need you to get me an Apple Card of $500 I want to suprise some of my staffs at work I will be glad if u can help
QUINLAN, ED
PRESIDENT
BASEBALL ONTARIOsent from my iPhone
On Tue, 15 Feb 2022 at 7:47 AM, Sarah Yang <[email protected]> wrote:
Hey there,
Could you tell me where you are located? Also, could you tell me more about your offer?
Sarah Yang
CEO, MNesty, LLC
On 14/02/2022 19:05 PM, wrote:
> Hello Steve yang happy valentine I have a request I will be glad if u can grant my my request get back to me a soon as possible
> QUINLAN, ED
> PRESIDENT
> BASEBALL ONTARIOsent from my iPhone
>
>
>
> On Wed, 2 Feb 2022 at 5:45 PM, Steven Yang <[email protected]> wrote:
> Hello,
>
> Can you give me some more info about what you're offering? Specifically, how does it apply to our business? How can we use this?
>
>
>
> Steven Yang
>
> CEO, MNesty, LLC
>
>
>
> On 02/02/2022 16:45 PM, ED wrote:
>
> > Sent: February 1, 2022 7:35 PM
>
> >
>
> > To:
>
> >
>
> > Subject: ED
>
> >
>
> >
>
> >
>
> >
>
> > Do you have a moment I have a request I need you to handle d. I am going into a meeting now, no calls so just reply my email....
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > ED
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
>
>
>
>
>
>
>
Hey there,
Could you tell me where you are located? Also, could you tell me more about your offer?
Sarah Yang
CEO, MNesty, LLC
Am in Ontario baseball can u get me 500$ Apple Card right now I need it I will refund it back as soon as am done here
On Tue, 15 Feb 2022 at 2:50 PM, Sarah Yang <[email protected]> wrote:
Hey there,
Could you tell me where you are located? Also, could you tell me more about your offer?
Sarah Yang
CEO, MNesty, LLC
On 15/02/2022 07:27 AM, wrote:
> I need you to get me an Apple Card of $500 I want to suprise some of my staffs at work I will be glad if u can help
>
> QUINLAN, ED
> PRESIDENT
> BASEBALL ONTARIOsent from my iPhone
>
> On Tue, 15 Feb 2022 at 7:47 AM, Sarah Yang <[email protected]> wrote:
> Hey there,
>
> Could you tell me where you are located? Also, could you tell me more about your offer?
>
>
>
> Sarah Yang
>
> CEO, MNesty, LLC
>
>
>
> On 14/02/2022 19:05 PM, wrote:
>
> > Hello Steve yang happy valentine I have a request I will be glad if u can grant my my request get back to me a soon as possible
>
> > QUINLAN, ED
>
> > PRESIDENT
>
> > BASEBALL ONTARIOsent from my iPhone
>
> >
>
> >
>
> >
>
> > On Wed, 2 Feb 2022 at 5:45 PM, Steven Yang <[email protected]> wrote:
>
> > Hello,
>
> >
>
> > Can you give me some more info about what you're offering? Specifically, how does it apply to our business? How can we use this?
>
> >
>
> >
>
> >
>
> > Steven Yang
>
> >
>
> > CEO, MNesty, LLC
>
> >
>
> >
>
> >
>
> > On 02/02/2022 16:45 PM, ED wrote:
>
> >
>
> > > Sent: February 1, 2022 7:35 PM
>
> >
>
> > >
>
> >
>
> > > To:
>
> >
>
> > >
>
> >
>
> > > Subject: ED
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > > Do you have a moment I have a request I need you to handle d. I am going into a meeting now, no calls so just reply my email....
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > > ED
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
>
>
>
>
>
>
>
>
Hi Stephanie,
I hope you are doing well.
Any updates regarding my above reward request ? I did not hear any word again from your side .Why are you not replying to me ?
Looking forward to your response.
Sincerely,
Rahat
On Mon, 21 Jun 2021 at 09:09, Rahat Ali <[email protected]> wrote:
Hi Stephanie,
Any updates regarding my above email?
Looking forward to your response.
Sincerely,
Rahat
On Thu, 17 Jun 2021 at 15:49, Rahat Ali <[email protected]> wrote:
You can apply this using DMARC and reject policy to fix this. Furthermore more this vulnerability can loss business and reputation loss because an attacker can send an email using your domain. This is the dangerous attack.
On Thu, Jun 17, 2021 at 3:47 PM Rahat Ali <[email protected]> wrote:
What is the best option for you to call skype, whatsapp or something else. We will discuss further about price model on call.
On Tue, Feb 23, 2021 at 11:51 PM Stephanie Yang <[email protected]> wrote:
Hi,
Great, thanks. Could we have a short call to discuss the specifics? What are your contact details? Also, what is your pricing model like?
Stephanie Yang
CEO, MNesty, LLC
On 23/02/2021 18:50 PM, Rahat Ali wrote:
> Sent: Tuesday, February 23, 2021 3:06 AM
>
> To: gcagent <[email protected]>; [email protected]; [email protected]; [email protected]; [email protected]; Brown, David <[email protected]
>
> Subject: Re: Bug report (5) SMPT Protection not used, I can hijack your email server
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
>
>
> Rahat
>
>
>
>
>
> On Tue, 26 Jan 2021, 12:23 am Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Mon, 18 Jan 2021 at 21:04, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi team
>
>
>
> Any updates regarding my submitted vulnerabilities reports ?
>
>
>
> Looking forward to your response
>
>
>
> Sincerely
>
> Rahat
>
>
>
>
> On Sun, 10 Jan 2021 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 5 Jan 2021 at 01:47, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Mon, 23 Nov 2020 at 12:43, Rahat Ali <[email protected]> wrote:
>
>
>
> Hi Team,
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Tue, 10 Nov 2020, 10:07 pm Rahat Ali, <[email protected]> wrote:
>
>
>
> Hi
>
>
>
> Any updates regarding my submitted vulnerability reports?
>
> Looking forward to hearing from you.
>
>
>
> Sincerely,
>
> Rahat
>
>
>
>
> On Sun, 8 Nov 2020 at 22:51, Rahat Ali <[email protected]> wrote:
>
>
>
>
> Hi Team,
>
>
>
>
>
> I found a Vulnerability in https://www.daybreakgames.com/
>
>
>
>
>
>
> Vulnerability Type: SMPT Protection not used, I can hijack your email server.
>
>
>
>
>
>
>
>
> Severity: Critical
>
>
>
>
>
>
> Description
>
> Companies like Coinbase, Yahoo,Google,Facebook and even hackerone implemented a strict email security policy (combining SPF,
> DKIM, and DMARC but I don't see that from daybreakgames.com/ ,
> You should apply strict SMPT policy to stop spoofed email sending from your domain.
>
> Exploit scenario:
>
> An attacker would send a Fake email from saying that Please change your password, The victim is aware of phishing attacks, But when he sees that the mail originated from
>
>
> , He has
> no other way than to believe it. Clicking on the link takes him to a website where certain JavaScript is executed which steals his bl.ink id and password (SESSION
> COOKIE). The results can be more dangerous.
>
> POC is also attached you can also see that i can use your domain name email and can send the mail to any of the user of bl.ink
>
> Proof of concept:
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> How to Fix:
>
>
>
>
>
>
>
>
> To fully implement your SPF policy, there is only one step left, adding it to the DNS record for the domain. Log in to control the name server. If you don’t know where that is,
> the default name server from the domain registrar (such as GoDaddy and NameCheap) is probably used and that is where you should log in to manage the DNS records.
>
>
>
>
>
> A TXT record should now be added with the value of the selected SPF policy. In many cases, the SPF policy needs to be placed within quotes.
>
>
>
>
>
> I Hope you will fix the issue as soon as possible. Looking forward to hear from you. Thank you
>
>
>
>
>
>
>
> Sincerely,
>
>
>
> Rahat
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> The information in this email message may be confidential and/or privileged and is intended only for use by the individual or entity to whom it is addressed. Any unauthorized disclosure, copying, distribution or use of any of the information contained in or
> attached to this message is strictly prohibited. If you have received this email message in error, please notify us immediately and securely delete this email and any attachments.
>
>
>
Hello,
I am a bit busy now, but I am definitely interested. When can we talk?
Sarah Yang
CEO, MNesty, LLC
We can talk now or you can share your best time.
On Thu, Feb 17, 2022 at 7:14 PM Sarah Yang <[email protected]> wrote:
Hello,
I am a bit busy now, but I am definitely interested. When can we talk?
Sarah Yang
CEO, MNesty, LLC
On 17/02/2022 13:37 PM, wrote:
> Hi Stephanie,
>
> I hope you are doing well.
> Any updates regarding my above reward request ? I did not hear any word again from your side .Why are you not replying to me ?
>
> Looking forward to your response.
>
> Sincerely,
> Rahat
>
> On Mon, 21 Jun 2021 at 09:09, Rahat Ali <[email protected]> wrote:
> Hi Stephanie,
>
> Any updates regarding my above email?
>
> Looking forward to your response.
>
> Sincerely,
> Rahat
>
> On Thu, 17 Jun 2021 at 15:49, Rahat Ali <[email protected]> wrote:
> You can apply this using DMARC and reject policy to fix this. Furthermore more this vulnerability can loss business and reputation loss because an attacker can send an email using your domain. This is the dangerous attack.
> On Thu, Jun 17, 2021 at 3:47 PM Rahat Ali <[email protected]> wrote:
> What is the best option for you to call skype, whatsapp or something else. We will discuss further about price model on call.
> On Tue, Feb 23, 2021 at 11:51 PM Stephanie Yang <[email protected]> wrote:
> Hi,
>
> Great, thanks. Could we have a short call to discuss the specifics? What are your contact details? Also, what is your pricing model like?
>
>
>
> Stephanie Yang
>
> CEO, MNesty, LLC
>
>
>
> On 23/02/2021 18:50 PM, Rahat Ali wrote:
>
> > Sent: Tuesday, February 23, 2021 3:06 AM
>
> >
>
> > To: gcagent <[email protected]>; [email protected]; [email protected]; [email protected]; [email protected]; Brown, David <[email protected]
>
> >
>
> > Subject: Re: Bug report (5) SMPT Protection not used, I can hijack your email server
>
> >
>
> >
>
> > Hi team
>
> >
>
> >
>
> >
>
> > Any updates regarding my submitted vulnerabilities reports ?
>
> >
>
> >
>
> >
>
> > Looking forward to your response
>
> >
>
> >
>
> >
>
> > Sincerely
>
> >
>
> >
>
> >
>
> > Rahat
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > On Tue, 26 Jan 2021, 12:23 am Rahat Ali, <[email protected]> wrote:
>
> >
>
> >
>
> >
>
> > Hi team
>
> >
>
> >
>
> >
>
> > Any updates regarding my submitted vulnerabilities reports ?
>
> >
>
> >
>
> >
>
> > Looking forward to your response
>
> >
>
> >
>
> >
>
> > Sincerely
>
> >
>
> > Rahat
>
> >
>
> >
>
> >
>
> >
>
> > On Mon, 18 Jan 2021 at 21:04, Rahat Ali <[email protected]> wrote:
>
> >
>
> >
>
> >
>
> > Hi team
>
> >
>
> >
>
> >
>
> > Any updates regarding my submitted vulnerabilities reports ?
>
> >
>
> >
>
> >
>
> > Looking forward to your response
>
> >
>
> >
>
> >
>
> > Sincerely
>
> >
>
> > Rahat
>
> >
>
> >
>
> >
>
> >
>
> > On Sun, 10 Jan 2021 at 22:51, Rahat Ali <[email protected]> wrote:
>
> >
>
> >
>
> >
>
> > Hi Team,
>
> >
>
> >
>
> >
>
> > Any updates regarding my submitted vulnerability reports?
>
> >
>
> > Looking forward to hearing from you.
>
> >
>
> >
>
> >
>
> > Sincerely,
>
> >
>
> > Rahat
>
> >
>
> >
>
> >
>
> >
>
> > On Tue, 5 Jan 2021 at 01:47, Rahat Ali <[email protected]> wrote:
>
> >
>
> >
>
> >
>
> > Hi Team,
>
> >
>
> >
>
> >
>
> > Any updates regarding my submitted vulnerability reports?
>
> >
>
> > Looking forward to hearing from you.
>
> >
>
> >
>
> >
>
> > Sincerely,
>
> >
>
> > Rahat
>
> >
>
> >
>
> >
>
> >
>
> > On Mon, 23 Nov 2020 at 12:43, Rahat Ali <[email protected]> wrote:
>
> >
>
> >
>
> >
>
> > Hi Team,
>
> >
>
> >
>
> >
>
> > Any updates regarding my submitted vulnerability reports?
>
> >
>
> > Looking forward to hearing from you.
>
> >
>
> >
>
> >
>
> > Sincerely,
>
> >
>
> > Rahat
>
> >
>
> >
>
> >
>
> >
>
> > On Tue, 10 Nov 2020, 10:07 pm Rahat Ali, <[email protected]> wrote:
>
> >
>
> >
>
> >
>
> > Hi
>
> >
>
> >
>
> >
>
> > Any updates regarding my submitted vulnerability reports?
>
> >
>
> > Looking forward to hearing from you.
>
> >
>
> >
>
> >
>
> > Sincerely,
>
> >
>
> > Rahat
>
> >
>
> >
>
> >
>
> >
>
> > On Sun, 8 Nov 2020 at 22:51, Rahat Ali <[email protected]> wrote:
>
> >
>
> >
>
> >
>
> >
>
> > Hi Team,
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > I found a Vulnerability in https://www.daybreakgames.com/
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > Vulnerability Type: SMPT Protection not used, I can hijack your email server.
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > Severity: Critical
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > Description
>
> >
>
> > Companies like Coinbase, Yahoo,Google,Facebook and even hackerone implemented a strict email security policy (combining SPF,
>
> > DKIM, and DMARC but I don't see that from daybreakgames.com/ ,
>
> > You should apply strict SMPT policy to stop spoofed email sending from your domain.
>
> >
>
> > Exploit scenario:
>
> >
>
> > An attacker would send a Fake email from saying that Please change your password, The victim is aware of phishing attacks, But when he sees that the mail originated from
>
> >
>
>
> >
>
> > , He has
>
> > no other way than to believe it. Clicking on the link takes him to a website where certain JavaScript is executed which steals his bl.ink id and password (SESSION
>
> > COOKIE). The results can be more dangerous.
>
> >
>
> > POC is also attached you can also see that i can use your domain name email and can send the mail to any of the user of bl.ink
>
> >
>
> > Proof of concept:
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > How to Fix:
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > To fully implement your SPF policy, there is only one step left, adding it to the DNS record for the domain. Log in to control the name server. If you don’t know where that is,
>
> > the default name server from the domain registrar (such as GoDaddy and NameCheap) is probably used and that is where you should log in to manage the DNS records.
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > A TXT record should now be added with the value of the selected SPF policy. In many cases, the SPF policy needs to be placed within quotes.
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > I Hope you will fix the issue as soon as possible. Looking forward to hear from you. Thank you
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > Sincerely,
>
> >
>
> >
>
> >
>
> > Rahat
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > The information in this email message may be confidential and/or privileged and is intended only for use by the individual or entity to whom it is addressed. Any unauthorized disclosure, copying, distribution or use of any of the information contained in or
>
> > attached to this message is strictly prohibited. If you have received this email message in error, please notify us immediately and securely delete this email and any attachments.
>
> >
>
> >
>
> >
>
>
>
>
>
>
>
>
>
>
>
Hello Sarah,
Hope I am finding you well. Any updates regarding my previous email?
Looking forward to hear from you soon,
Regards
Rahat
On Thu, 17 Feb 2022 at 19:19, Rahat Ali <[email protected]> wrote:
We can talk now or you can share your best time.
On Thu, Feb 17, 2022 at 7:14 PM Sarah Yang <[email protected]> wrote:
Hello,
I am a bit busy now, but I am definitely interested. When can we talk?
Sarah Yang
CEO, MNesty, LLC
On 17/02/2022 13:37 PM, wrote:
> Hi Stephanie,
>
> I hope you are doing well.
> Any updates regarding my above reward request ? I did not hear any word again from your side .Why are you not replying to me ?
>
> Looking forward to your response.
>
> Sincerely,
> Rahat
>
> On Mon, 21 Jun 2021 at 09:09, Rahat Ali <[email protected]> wrote:
> Hi Stephanie,
>
> Any updates regarding my above email?
>
> Looking forward to your response.
>
> Sincerely,
> Rahat
>
> On Thu, 17 Jun 2021 at 15:49, Rahat Ali <[email protected]> wrote:
> You can apply this using DMARC and reject policy to fix this. Furthermore more this vulnerability can loss business and reputation loss because an attacker can send an email using your domain. This is the dangerous attack.
> On Thu, Jun 17, 2021 at 3:47 PM Rahat Ali <[email protected]> wrote:
> What is the best option for you to call skype, whatsapp or something else. We will discuss further about price model on call.
> On Tue, Feb 23, 2021 at 11:51 PM Stephanie Yang <[email protected]> wrote:
> Hi,
>
> Great, thanks. Could we have a short call to discuss the specifics? What are your contact details? Also, what is your pricing model like?
>
>
>
> Stephanie Yang
>
> CEO, MNesty, LLC
>
>
>
> On 23/02/2021 18:50 PM, Rahat Ali wrote:
>
> > Sent: Tuesday, February 23, 2021 3:06 AM
>
> >
>
> > To: gcagent <[email protected]>; [email protected]; [email protected]; [email protected]; [email protected]; Brown, David <[email protected]
>
> >
>
> > Subject: Re: Bug report (5) SMPT Protection not used, I can hijack your email server
>
> >
>
> >
>
> > Hi team
>
> >
>
> >
>
> >
>
> > Any updates regarding my submitted vulnerabilities reports ?
>
> >
>
> >
>
> >
>
> > Looking forward to your response
>
> >
>
> >
>
> >
>
> > Sincerely
>
> >
>
> >
>
> >
>
> > Rahat
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > On Tue, 26 Jan 2021, 12:23 am Rahat Ali, <[email protected]> wrote:
>
> >
>
> >
>
> >
>
> > Hi team
>
> >
>
> >
>
> >
>
> > Any updates regarding my submitted vulnerabilities reports ?
>
> >
>
> >
>
> >
>
> > Looking forward to your response
>
> >
>
> >
>
> >
>
> > Sincerely
>
> >
>
> > Rahat
>
> >
>
> >
>
> >
>
> >
>
> > On Mon, 18 Jan 2021 at 21:04, Rahat Ali <[email protected]> wrote:
>
> >
>
> >
>
> >
>
> > Hi team
>
> >
>
> >
>
> >
>
> > Any updates regarding my submitted vulnerabilities reports ?
>
> >
>
> >
>
> >
>
> > Looking forward to your response
>
> >
>
> >
>
> >
>
> > Sincerely
>
> >
>
> > Rahat
>
> >
>
> >
>
> >
>
> >
>
> > On Sun, 10 Jan 2021 at 22:51, Rahat Ali <[email protected]> wrote:
>
> >
>
> >
>
> >
>
> > Hi Team,
>
> >
>
> >
>
> >
>
> > Any updates regarding my submitted vulnerability reports?
>
> >
>
> > Looking forward to hearing from you.
>
> >
>
> >
>
> >
>
> > Sincerely,
>
> >
>
> > Rahat
>
> >
>
> >
>
> >
>
> >
>
> > On Tue, 5 Jan 2021 at 01:47, Rahat Ali <[email protected]> wrote:
>
> >
>
> >
>
> >
>
> > Hi Team,
>
> >
>
> >
>
> >
>
> > Any updates regarding my submitted vulnerability reports?
>
> >
>
> > Looking forward to hearing from you.
>
> >
>
> >
>
> >
>
> > Sincerely,
>
> >
>
> > Rahat
>
> >
>
> >
>
> >
>
> >
>
> > On Mon, 23 Nov 2020 at 12:43, Rahat Ali <[email protected]> wrote:
>
> >
>
> >
>
> >
>
> > Hi Team,
>
> >
>
> >
>
> >
>
> > Any updates regarding my submitted vulnerability reports?
>
> >
>
> > Looking forward to hearing from you.
>
> >
>
> >
>
> >
>
> > Sincerely,
>
> >
>
> > Rahat
>
> >
>
> >
>
> >
>
> >
>
> > On Tue, 10 Nov 2020, 10:07 pm Rahat Ali, <[email protected]> wrote:
>
> >
>
> >
>
> >
>
> > Hi
>
> >
>
> >
>
> >
>
> > Any updates regarding my submitted vulnerability reports?
>
> >
>
> > Looking forward to hearing from you.
>
> >
>
> >
>
> >
>
> > Sincerely,
>
> >
>
> > Rahat
>
> >
>
> >
>
> >
>
> >
>
> > On Sun, 8 Nov 2020 at 22:51, Rahat Ali <[email protected]> wrote:
>
> >
>
> >
>
> >
>
> >
>
> > Hi Team,
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > I found a Vulnerability in https://www.daybreakgames.com/
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > Vulnerability Type: SMPT Protection not used, I can hijack your email server.
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > Severity: Critical
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > Description
>
> >
>
> > Companies like Coinbase, Yahoo,Google,Facebook and even hackerone implemented a strict email security policy (combining SPF,
>
> > DKIM, and DMARC but I don't see that from daybreakgames.com/ ,
>
> > You should apply strict SMPT policy to stop spoofed email sending from your domain.
>
> >
>
> > Exploit scenario:
>
> >
>
> > An attacker would send a Fake email from saying that Please change your password, The victim is aware of phishing attacks, But when he sees that the mail originated from
>
> >
>
>
> >
>
> > , He has
>
> > no other way than to believe it. Clicking on the link takes him to a website where certain JavaScript is executed which steals his bl.ink id and password (SESSION
>
> > COOKIE). The results can be more dangerous.
>
> >
>
> > POC is also attached you can also see that i can use your domain name email and can send the mail to any of the user of bl.ink
>
> >
>
> > Proof of concept:
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > How to Fix:
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > To fully implement your SPF policy, there is only one step left, adding it to the DNS record for the domain. Log in to control the name server. If you don’t know where that is,
>
> > the default name server from the domain registrar (such as GoDaddy and NameCheap) is probably used and that is where you should log in to manage the DNS records.
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > A TXT record should now be added with the value of the selected SPF policy. In many cases, the SPF policy needs to be placed within quotes.
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > I Hope you will fix the issue as soon as possible. Looking forward to hear from you. Thank you
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > Sincerely,
>
> >
>
> >
>
> >
>
> > Rahat
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > The information in this email message may be confidential and/or privileged and is intended only for use by the individual or entity to whom it is addressed. Any unauthorized disclosure, copying, distribution or use of any of the information contained in or
>
> > attached to this message is strictly prohibited. If you have received this email message in error, please notify us immediately and securely delete this email and any attachments.
>
> >
>
> >
>
> >
>
>
>
>
>
>
>
>
>
>
>
Hello how are you doing Sara yang I need you to get something done for me real quick
QUINLAN, ED
> PRESIDENT
> BASEBALL ONTARIOsent from my iPhone
On Tue, 15 Feb 2022 at 2:53 PM, QUINLAN, ED <[email protected]> wrote:
Am in Ontario baseball can u get me 500$ Apple Card right now I need it I will refund it back as soon as am done here
On Tue, 15 Feb 2022 at 2:50 PM, Sarah Yang <[email protected]> wrote:
Hey there,
Could you tell me where you are located? Also, could you tell me more about your offer?
Sarah Yang
CEO, MNesty, LLC
On 15/02/2022 07:27 AM, wrote:
> I need you to get me an Apple Card of $500 I want to suprise some of my staffs at work I will be glad if u can help
>
> QUINLAN, ED
> PRESIDENT
> BASEBALL ONTARIOsent from my iPhone
>
> On Tue, 15 Feb 2022 at 7:47 AM, Sarah Yang <[email protected]> wrote:
> Hey there,
>
> Could you tell me where you are located? Also, could you tell me more about your offer?
>
>
>
> Sarah Yang
>
> CEO, MNesty, LLC
>
>
>
> On 14/02/2022 19:05 PM, wrote:
>
> > Hello Steve yang happy valentine I have a request I will be glad if u can grant my my request get back to me a soon as possible
>
> > QUINLAN, ED
>
> > PRESIDENT
>
> > BASEBALL ONTARIOsent from my iPhone
>
> >
>
> >
>
> >
>
> > On Wed, 2 Feb 2022 at 5:45 PM, Steven Yang <[email protected]> wrote:
>
> > Hello,
>
> >
>
> > Can you give me some more info about what you're offering? Specifically, how does it apply to our business? How can we use this?
>
> >
>
> >
>
> >
>
> > Steven Yang
>
> >
>
> > CEO, MNesty, LLC
>
> >
>
> >
>
> >
>
> > On 02/02/2022 16:45 PM, ED wrote:
>
> >
>
> > > Sent: February 1, 2022 7:35 PM
>
> >
>
> > >
>
> >
>
> > > To:
>
> >
>
> > >
>
> >
>
> > > Subject: ED
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > > Do you have a moment I have a request I need you to handle d. I am going into a meeting now, no calls so just reply my email....
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > > ED
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
>
>
>
>
>
>
>
>
Hi,
that sounds impressive! I am excited to hear more about your company. Can you help me with some references, completed projects, partners, etc.?
Sarah Yang
CEO, MNesty, LLC
Good morning can I need you to get something done for me now am about to go into a meeting no calls just text ASAP
QUINLAN, ED
>
> > PRESIDENT
>
> > BASEBALL ONTARIOsent from my iPhone
On Sat, 5 Mar 2022 at 2:41 PM, Sarah Yang <[email protected]> wrote:
Hi,
that sounds impressive! I am excited to hear more about your company. Can you help me with some references, completed projects, partners, etc.?
Sarah Yang
CEO, MNesty, LLC
On 05/03/2022 02:25 AM, wrote:
> Hello how are you doing Sara yang I need you to get something done for me real quick
> QUINLAN, ED
> > PRESIDENT
> > BASEBALL ONTARIOsent from my iPhone
>
>
>
> On Tue, 15 Feb 2022 at 2:53 PM, QUINLAN, ED <[email protected]> wrote:
> Am in Ontario baseball can u get me 500$ Apple Card right now I need it I will refund it back as soon as am done here
> On Tue, 15 Feb 2022 at 2:50 PM, Sarah Yang <[email protected]> wrote:
> Hey there,
>
> Could you tell me where you are located? Also, could you tell me more about your offer?
>
>
>
> Sarah Yang
>
> CEO, MNesty, LLC
>
>
>
> On 15/02/2022 07:27 AM, wrote:
>
> > I need you to get me an Apple Card of $500 I want to suprise some of my staffs at work I will be glad if u can help
>
> >
>
> > QUINLAN, ED
>
> > PRESIDENT
>
> > BASEBALL ONTARIOsent from my iPhone
>
> >
>
> > On Tue, 15 Feb 2022 at 7:47 AM, Sarah Yang <[email protected]> wrote:
>
> > Hey there,
>
> >
>
> > Could you tell me where you are located? Also, could you tell me more about your offer?
>
> >
>
> >
>
> >
>
> > Sarah Yang
>
> >
>
> > CEO, MNesty, LLC
>
> >
>
> >
>
> >
>
> > On 14/02/2022 19:05 PM, wrote:
>
> >
>
> > > Hello Steve yang happy valentine I have a request I will be glad if u can grant my my request get back to me a soon as possible
>
> >
>
> > > QUINLAN, ED
>
> >
>
> > > PRESIDENT
>
> >
>
> > > BASEBALL ONTARIOsent from my iPhone
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > > On Wed, 2 Feb 2022 at 5:45 PM, Steven Yang <[email protected]> wrote:
>
> >
>
> > > Hello,
>
> >
>
> > >
>
> >
>
> > > Can you give me some more info about what you're offering? Specifically, how does it apply to our business? How can we use this?
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > > Steven Yang
>
> >
>
> > >
>
> >
>
> > > CEO, MNesty, LLC
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > > On 02/02/2022 16:45 PM, ED wrote:
>
> >
>
> > >
>
> >
>
> > > > Sent: February 1, 2022 7:35 PM
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > > To:
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > > Subject: ED
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > > Do you have a moment I have a request I need you to handle d. I am going into a meeting now, no calls so just reply my email....
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > > ED
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
>
>
>
>
>
>
>
>
Hello Sarah get back to me
On Sat, 5 Mar 2022 at 3:06 PM, QUINLAN ED <[email protected]> wrote:
Good morning can I need you to get something done for me now am about to go into a meeting no calls just text ASAP
QUINLAN, ED
>
> > PRESIDENT
>
> > BASEBALL ONTARIOsent from my iPhone
On Sat, 5 Mar 2022 at 2:41 PM, Sarah Yang <[email protected]> wrote:
Hi,
that sounds impressive! I am excited to hear more about your company. Can you help me with some references, completed projects, partners, etc.?
Sarah Yang
CEO, MNesty, LLC
On 05/03/2022 02:25 AM, wrote:
> Hello how are you doing Sara yang I need you to get something done for me real quick
> QUINLAN, ED
> > PRESIDENT
> > BASEBALL ONTARIOsent from my iPhone
>
>
>
> On Tue, 15 Feb 2022 at 2:53 PM, QUINLAN, ED <[email protected]> wrote:
> Am in Ontario baseball can u get me 500$ Apple Card right now I need it I will refund it back as soon as am done here
> On Tue, 15 Feb 2022 at 2:50 PM, Sarah Yang <[email protected]> wrote:
> Hey there,
>
> Could you tell me where you are located? Also, could you tell me more about your offer?
>
>
>
> Sarah Yang
>
> CEO, MNesty, LLC
>
>
>
> On 15/02/2022 07:27 AM, wrote:
>
> > I need you to get me an Apple Card of $500 I want to suprise some of my staffs at work I will be glad if u can help
>
> >
>
> > QUINLAN, ED
>
> > PRESIDENT
>
> > BASEBALL ONTARIOsent from my iPhone
>
> >
>
> > On Tue, 15 Feb 2022 at 7:47 AM, Sarah Yang <[email protected]> wrote:
>
> > Hey there,
>
> >
>
> > Could you tell me where you are located? Also, could you tell me more about your offer?
>
> >
>
> >
>
> >
>
> > Sarah Yang
>
> >
>
> > CEO, MNesty, LLC
>
> >
>
> >
>
> >
>
> > On 14/02/2022 19:05 PM, wrote:
>
> >
>
> > > Hello Steve yang happy valentine I have a request I will be glad if u can grant my my request get back to me a soon as possible
>
> >
>
> > > QUINLAN, ED
>
> >
>
> > > PRESIDENT
>
> >
>
> > > BASEBALL ONTARIOsent from my iPhone
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > > On Wed, 2 Feb 2022 at 5:45 PM, Steven Yang <[email protected]> wrote:
>
> >
>
> > > Hello,
>
> >
>
> > >
>
> >
>
> > > Can you give me some more info about what you're offering? Specifically, how does it apply to our business? How can we use this?
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > > Steven Yang
>
> >
>
> > >
>
> >
>
> > > CEO, MNesty, LLC
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > > On 02/02/2022 16:45 PM, ED wrote:
>
> >
>
> > >
>
> >
>
> > > > Sent: February 1, 2022 7:35 PM
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > > To:
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > > Subject: ED
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > > Do you have a moment I have a request I need you to handle d. I am going into a meeting now, no calls so just reply my email....
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > > ED
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
>
>
>
>
>
>
>
>
Hello
On Sat, 5 Mar 2022 at 4:50 PM, QUINLAN ED <[email protected]> wrote:
Hello Sarah get back to me
On Sat, 5 Mar 2022 at 3:06 PM, QUINLAN ED <[email protected]> wrote:
Good morning can I need you to get something done for me now am about to go into a meeting no calls just text ASAP
QUINLAN, ED
>
> > PRESIDENT
>
> > BASEBALL ONTARIOsent from my iPhone
On Sat, 5 Mar 2022 at 2:41 PM, Sarah Yang <[email protected]> wrote:
Hi,
that sounds impressive! I am excited to hear more about your company. Can you help me with some references, completed projects, partners, etc.?
Sarah Yang
CEO, MNesty, LLC
On 05/03/2022 02:25 AM, wrote:
> Hello how are you doing Sara yang I need you to get something done for me real quick
> QUINLAN, ED
> > PRESIDENT
> > BASEBALL ONTARIOsent from my iPhone
>
>
>
> On Tue, 15 Feb 2022 at 2:53 PM, QUINLAN, ED <[email protected]> wrote:
> Am in Ontario baseball can u get me 500$ Apple Card right now I need it I will refund it back as soon as am done here
> On Tue, 15 Feb 2022 at 2:50 PM, Sarah Yang <[email protected]> wrote:
> Hey there,
>
> Could you tell me where you are located? Also, could you tell me more about your offer?
>
>
>
> Sarah Yang
>
> CEO, MNesty, LLC
>
>
>
> On 15/02/2022 07:27 AM, wrote:
>
> > I need you to get me an Apple Card of $500 I want to suprise some of my staffs at work I will be glad if u can help
>
> >
>
> > QUINLAN, ED
>
> > PRESIDENT
>
> > BASEBALL ONTARIOsent from my iPhone
>
> >
>
> > On Tue, 15 Feb 2022 at 7:47 AM, Sarah Yang <[email protected]> wrote:
>
> > Hey there,
>
> >
>
> > Could you tell me where you are located? Also, could you tell me more about your offer?
>
> >
>
> >
>
> >
>
> > Sarah Yang
>
> >
>
> > CEO, MNesty, LLC
>
> >
>
> >
>
> >
>
> > On 14/02/2022 19:05 PM, wrote:
>
> >
>
> > > Hello Steve yang happy valentine I have a request I will be glad if u can grant my my request get back to me a soon as possible
>
> >
>
> > > QUINLAN, ED
>
> >
>
> > > PRESIDENT
>
> >
>
> > > BASEBALL ONTARIOsent from my iPhone
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > > On Wed, 2 Feb 2022 at 5:45 PM, Steven Yang <[email protected]> wrote:
>
> >
>
> > > Hello,
>
> >
>
> > >
>
> >
>
> > > Can you give me some more info about what you're offering? Specifically, how does it apply to our business? How can we use this?
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > > Steven Yang
>
> >
>
> > >
>
> >
>
> > > CEO, MNesty, LLC
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > > On 02/02/2022 16:45 PM, ED wrote:
>
> >
>
> > >
>
> >
>
> > > > Sent: February 1, 2022 7:35 PM
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > > To:
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > > Subject: ED
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > > Do you have a moment I have a request I need you to handle d. I am going into a meeting now, no calls so just reply my email....
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > > ED
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> > >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
>
>
>
>
>
>
>
>
Hi Sarah,
Any updates regarding my vulnerability submissions? Why are you not replying to my emails? What is this behaviour ? Our board team members are questioning us again and again and it's been a long time now you haven't responded to us back. Please respond as our authorities are pressuring us.
Let us know as we have found a server access vulnerability in your application which we want to proceed to you but you're not responding to our emails.
Looking forward to hearing from you.
Sincerely,
Rahat
On Tue, 22 Feb 2022 at 16:08, Rahat Ali <[email protected]> wrote:
Hello Sarah,
Hope I am finding you well. Any updates regarding my previous email?
Looking forward to hear from you soon,
Regards
Rahat
On Thu, 17 Feb 2022 at 19:19, Rahat Ali <[email protected]> wrote:
We can talk now or you can share your best time.
On Thu, Feb 17, 2022 at 7:14 PM Sarah Yang <[email protected]> wrote:
Hello,
I am a bit busy now, but I am definitely interested. When can we talk?
Sarah Yang
CEO, MNesty, LLC
On 17/02/2022 13:37 PM, wrote:
> Hi Stephanie,
>
> I hope you are doing well.
> Any updates regarding my above reward request ? I did not hear any word again from your side .Why are you not replying to me ?
>
> Looking forward to your response.
>
> Sincerely,
> Rahat
>
> On Mon, 21 Jun 2021 at 09:09, Rahat Ali <[email protected]> wrote:
> Hi Stephanie,
>
> Any updates regarding my above email?
>
> Looking forward to your response.
>
> Sincerely,
> Rahat
>
> On Thu, 17 Jun 2021 at 15:49, Rahat Ali <[email protected]> wrote:
> You can apply this using DMARC and reject policy to fix this. Furthermore more this vulnerability can loss business and reputation loss because an attacker can send an email using your domain. This is the dangerous attack.
> On Thu, Jun 17, 2021 at 3:47 PM Rahat Ali <[email protected]> wrote:
> What is the best option for you to call skype, whatsapp or something else. We will discuss further about price model on call.
> On Tue, Feb 23, 2021 at 11:51 PM Stephanie Yang <[email protected]> wrote:
> Hi,
>
> Great, thanks. Could we have a short call to discuss the specifics? What are your contact details? Also, what is your pricing model like?
>
>
>
> Stephanie Yang
>
> CEO, MNesty, LLC
>
>
>
> On 23/02/2021 18:50 PM, Rahat Ali wrote:
>
> > Sent: Tuesday, February 23, 2021 3:06 AM
>
> >
>
> > To: gcagent <[email protected]>; [email protected]; [email protected]; [email protected]; [email protected]; Brown, David <[email protected]
>
> >
>
> > Subject: Re: Bug report (5) SMPT Protection not used, I can hijack your email server
>
> >
>
> >
>
> > Hi team
>
> >
>
> >
>
> >
>
> > Any updates regarding my submitted vulnerabilities reports ?
>
> >
>
> >
>
> >
>
> > Looking forward to your response
>
> >
>
> >
>
> >
>
> > Sincerely
>
> >
>
> >
>
> >
>
> > Rahat
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > On Tue, 26 Jan 2021, 12:23 am Rahat Ali, <[email protected]> wrote:
>
> >
>
> >
>
> >
>
> > Hi team
>
> >
>
> >
>
> >
>
> > Any updates regarding my submitted vulnerabilities reports ?
>
> >
>
> >
>
> >
>
> > Looking forward to your response
>
> >
>
> >
>
> >
>
> > Sincerely
>
> >
>
> > Rahat
>
> >
>
> >
>
> >
>
> >
>
> > On Mon, 18 Jan 2021 at 21:04, Rahat Ali <[email protected]> wrote:
>
> >
>
> >
>
> >
>
> > Hi team
>
> >
>
> >
>
> >
>
> > Any updates regarding my submitted vulnerabilities reports ?
>
> >
>
> >
>
> >
>
> > Looking forward to your response
>
> >
>
> >
>
> >
>
> > Sincerely
>
> >
>
> > Rahat
>
> >
>
> >
>
> >
>
> >
>
> > On Sun, 10 Jan 2021 at 22:51, Rahat Ali <[email protected]> wrote:
>
> >
>
> >
>
> >
>
> > Hi Team,
>
> >
>
> >
>
> >
>
> > Any updates regarding my submitted vulnerability reports?
>
> >
>
> > Looking forward to hearing from you.
>
> >
>
> >
>
> >
>
> > Sincerely,
>
> >
>
> > Rahat
>
> >
>
> >
>
> >
>
> >
>
> > On Tue, 5 Jan 2021 at 01:47, Rahat Ali <[email protected]> wrote:
>
> >
>
> >
>
> >
>
> > Hi Team,
>
> >
>
> >
>
> >
>
> > Any updates regarding my submitted vulnerability reports?
>
> >
>
> > Looking forward to hearing from you.
>
> >
>
> >
>
> >
>
> > Sincerely,
>
> >
>
> > Rahat
>
> >
>
> >
>
> >
>
> >
>
> > On Mon, 23 Nov 2020 at 12:43, Rahat Ali <[email protected]> wrote:
>
> >
>
> >
>
> >
>
> > Hi Team,
>
> >
>
> >
>
> >
>
> > Any updates regarding my submitted vulnerability reports?
>
> >
>
> > Looking forward to hearing from you.
>
> >
>
> >
>
> >
>
> > Sincerely,
>
> >
>
> > Rahat
>
> >
>
> >
>
> >
>
> >
>
> > On Tue, 10 Nov 2020, 10:07 pm Rahat Ali, <[email protected]> wrote:
>
> >
>
> >
>
> >
>
> > Hi
>
> >
>
> >
>
> >
>
> > Any updates regarding my submitted vulnerability reports?
>
> >
>
> > Looking forward to hearing from you.
>
> >
>
> >
>
> >
>
> > Sincerely,
>
> >
>
> > Rahat
>
> >
>
> >
>
> >
>
> >
>
> > On Sun, 8 Nov 2020 at 22:51, Rahat Ali <[email protected]> wrote:
>
> >
>
> >
>
> >
>
> >
>
> > Hi Team,
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > I found a Vulnerability in https://www.daybreakgames.com/
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > Vulnerability Type: SMPT Protection not used, I can hijack your email server.
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > Severity: Critical
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > Description
>
> >
>
> > Companies like Coinbase, Yahoo,Google,Facebook and even hackerone implemented a strict email security policy (combining SPF,
>
> > DKIM, and DMARC but I don't see that from daybreakgames.com/ ,
>
> > You should apply strict SMPT policy to stop spoofed email sending from your domain.
>
> >
>
> > Exploit scenario:
>
> >
>
> > An attacker would send a Fake email from saying that Please change your password, The victim is aware of phishing attacks, But when he sees that the mail originated from
>
> >
>
>
> >
>
> > , He has
>
> > no other way than to believe it. Clicking on the link takes him to a website where certain JavaScript is executed which steals his bl.ink id and password (SESSION
>
> > COOKIE). The results can be more dangerous.
>
> >
>
> > POC is also attached you can also see that i can use your domain name email and can send the mail to any of the user of bl.ink
>
> >
>
> > Proof of concept:
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > How to Fix:
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > To fully implement your SPF policy, there is only one step left, adding it to the DNS record for the domain. Log in to control the name server. If you don’t know where that is,
>
> > the default name server from the domain registrar (such as GoDaddy and NameCheap) is probably used and that is where you should log in to manage the DNS records.
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > A TXT record should now be added with the value of the selected SPF policy. In many cases, the SPF policy needs to be placed within quotes.
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > I Hope you will fix the issue as soon as possible. Looking forward to hear from you. Thank you
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > Sincerely,
>
> >
>
> >
>
> >
>
> > Rahat
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > The information in this email message may be confidential and/or privileged and is intended only for use by the individual or entity to whom it is addressed. Any unauthorized disclosure, copying, distribution or use of any of the information contained in or
>
> > attached to this message is strictly prohibited. If you have received this email message in error, please notify us immediately and securely delete this email and any attachments.
>
> >
>
> >
>
> >
>
>
>
>
>
>
>
>
>
>
>
Hi Sarah,
I hope you are doing well enough. It has been a long time with no response. I have done so hard work for these vulnerability reports.I have not heard any word again from your side. I am requesting you to please cooperate with me and respond to me regarding my reward request. I hope you would take it considerably.
Looking forward to hearing from you
Sincerely
Rahat
On Sun, 20 Mar 2022 at 00:29, Rahat Ali <[email protected]> wrote:
Hi Sarah,
Any updates regarding my vulnerability submissions? Why are you not replying to my emails? What is this behaviour ? Our board team members are questioning us again and again and it's been a long time now you haven't responded to us back. Please respond as our authorities are pressuring us.
Let us know as we have found a server access vulnerability in your application which we want to proceed to you but you're not responding to our emails.
Looking forward to hearing from you.
Sincerely,
Rahat
On Tue, 22 Feb 2022 at 16:08, Rahat Ali <[email protected]> wrote:
Hello Sarah,
Hope I am finding you well. Any updates regarding my previous email?
Looking forward to hear from you soon,
Regards
Rahat
On Thu, 17 Feb 2022 at 19:19, Rahat Ali <[email protected]> wrote:
We can talk now or you can share your best time.
On Thu, Feb 17, 2022 at 7:14 PM Sarah Yang <[email protected]> wrote:
Hello,
I am a bit busy now, but I am definitely interested. When can we talk?
Sarah Yang
CEO, MNesty, LLC
On 17/02/2022 13:37 PM, wrote:
> Hi Stephanie,
>
> I hope you are doing well.
> Any updates regarding my above reward request ? I did not hear any word again from your side .Why are you not replying to me ?
>
> Looking forward to your response.
>
> Sincerely,
> Rahat
>
> On Mon, 21 Jun 2021 at 09:09, Rahat Ali <[email protected]> wrote:
> Hi Stephanie,
>
> Any updates regarding my above email?
>
> Looking forward to your response.
>
> Sincerely,
> Rahat
>
> On Thu, 17 Jun 2021 at 15:49, Rahat Ali <[email protected]> wrote:
> You can apply this using DMARC and reject policy to fix this. Furthermore more this vulnerability can loss business and reputation loss because an attacker can send an email using your domain. This is the dangerous attack.
> On Thu, Jun 17, 2021 at 3:47 PM Rahat Ali <[email protected]> wrote:
> What is the best option for you to call skype, whatsapp or something else. We will discuss further about price model on call.
> On Tue, Feb 23, 2021 at 11:51 PM Stephanie Yang <[email protected]> wrote:
> Hi,
>
> Great, thanks. Could we have a short call to discuss the specifics? What are your contact details? Also, what is your pricing model like?
>
>
>
> Stephanie Yang
>
> CEO, MNesty, LLC
>
>
>
> On 23/02/2021 18:50 PM, Rahat Ali wrote:
>
> > Sent: Tuesday, February 23, 2021 3:06 AM
>
> >
>
> > To: gcagent <[email protected]>; [email protected]; [email protected]; [email protected]; [email protected]; Brown, David <[email protected]
>
> >
>
> > Subject: Re: Bug report (5) SMPT Protection not used, I can hijack your email server
>
> >
>
> >
>
> > Hi team
>
> >
>
> >
>
> >
>
> > Any updates regarding my submitted vulnerabilities reports ?
>
> >
>
> >
>
> >
>
> > Looking forward to your response
>
> >
>
> >
>
> >
>
> > Sincerely
>
> >
>
> >
>
> >
>
> > Rahat
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > On Tue, 26 Jan 2021, 12:23 am Rahat Ali, <[email protected]> wrote:
>
> >
>
> >
>
> >
>
> > Hi team
>
> >
>
> >
>
> >
>
> > Any updates regarding my submitted vulnerabilities reports ?
>
> >
>
> >
>
> >
>
> > Looking forward to your response
>
> >
>
> >
>
> >
>
> > Sincerely
>
> >
>
> > Rahat
>
> >
>
> >
>
> >
>
> >
>
> > On Mon, 18 Jan 2021 at 21:04, Rahat Ali <[email protected]> wrote:
>
> >
>
> >
>
> >
>
> > Hi team
>
> >
>
> >
>
> >
>
> > Any updates regarding my submitted vulnerabilities reports ?
>
> >
>
> >
>
> >
>
> > Looking forward to your response
>
> >
>
> >
>
> >
>
> > Sincerely
>
> >
>
> > Rahat
>
> >
>
> >
>
> >
>
> >
>
> > On Sun, 10 Jan 2021 at 22:51, Rahat Ali <[email protected]> wrote:
>
> >
>
> >
>
> >
>
> > Hi Team,
>
> >
>
> >
>
> >
>
> > Any updates regarding my submitted vulnerability reports?
>
> >
>
> > Looking forward to hearing from you.
>
> >
>
> >
>
> >
>
> > Sincerely,
>
> >
>
> > Rahat
>
> >
>
> >
>
> >
>
> >
>
> > On Tue, 5 Jan 2021 at 01:47, Rahat Ali <[email protected]> wrote:
>
> >
>
> >
>
> >
>
> > Hi Team,
>
> >
>
> >
>
> >
>
> > Any updates regarding my submitted vulnerability reports?
>
> >
>
> > Looking forward to hearing from you.
>
> >
>
> >
>
> >
>
> > Sincerely,
>
> >
>
> > Rahat
>
> >
>
> >
>
> >
>
> >
>
> > On Mon, 23 Nov 2020 at 12:43, Rahat Ali <[email protected]> wrote:
>
> >
>
> >
>
> >
>
> > Hi Team,
>
> >
>
> >
>
> >
>
> > Any updates regarding my submitted vulnerability reports?
>
> >
>
> > Looking forward to hearing from you.
>
> >
>
> >
>
> >
>
> > Sincerely,
>
> >
>
> > Rahat
>
> >
>
> >
>
> >
>
> >
>
> > On Tue, 10 Nov 2020, 10:07 pm Rahat Ali, <[email protected]> wrote:
>
> >
>
> >
>
> >
>
> > Hi
>
> >
>
> >
>
> >
>
> > Any updates regarding my submitted vulnerability reports?
>
> >
>
> > Looking forward to hearing from you.
>
> >
>
> >
>
> >
>
> > Sincerely,
>
> >
>
> > Rahat
>
> >
>
> >
>
> >
>
> >
>
> > On Sun, 8 Nov 2020 at 22:51, Rahat Ali <[email protected]> wrote:
>
> >
>
> >
>
> >
>
> >
>
> > Hi Team,
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > I found a Vulnerability in https://www.daybreakgames.com/
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > Vulnerability Type: SMPT Protection not used, I can hijack your email server.
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > Severity: Critical
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > Description
>
> >
>
> > Companies like Coinbase, Yahoo,Google,Facebook and even hackerone implemented a strict email security policy (combining SPF,
>
> > DKIM, and DMARC but I don't see that from daybreakgames.com/ ,
>
> > You should apply strict SMPT policy to stop spoofed email sending from your domain.
>
> >
>
> > Exploit scenario:
>
> >
>
> > An attacker would send a Fake email from saying that Please change your password, The victim is aware of phishing attacks, But when he sees that the mail originated from
>
> >
>
>
> >
>
> > , He has
>
> > no other way than to believe it. Clicking on the link takes him to a website where certain JavaScript is executed which steals his bl.ink id and password (SESSION
>
> > COOKIE). The results can be more dangerous.
>
> >
>
> > POC is also attached you can also see that i can use your domain name email and can send the mail to any of the user of bl.ink
>
> >
>
> > Proof of concept:
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > How to Fix:
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > To fully implement your SPF policy, there is only one step left, adding it to the DNS record for the domain. Log in to control the name server. If you don’t know where that is,
>
> > the default name server from the domain registrar (such as GoDaddy and NameCheap) is probably used and that is where you should log in to manage the DNS records.
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > A TXT record should now be added with the value of the selected SPF policy. In many cases, the SPF policy needs to be placed within quotes.
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > I Hope you will fix the issue as soon as possible. Looking forward to hear from you. Thank you
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > Sincerely,
>
> >
>
> >
>
> >
>
> > Rahat
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> >
>
> > The information in this email message may be confidential and/or privileged and is intended only for use by the individual or entity to whom it is addressed. Any unauthorized disclosure, copying, distribution or use of any of the information contained in or
>
> > attached to this message is strictly prohibited. If you have received this email message in error, please notify us immediately and securely delete this email and any attachments.
>
> >
>
> >
>
> >
>
>
>
>
>
>
>
>
>
>
>
Attention Mrs.
Sarah Yang .
This office is hereby acknowledging the receipt of your message in response to our letter to you regarding your funds (US$5.9M) in which you indicated your interest to receive the said funds and we understood its contents.
I use to be very busy due to the nature of my work here therefore, I must apologize you for my late response to your message Meanwhile, to avoid anything that will distract your attention from concentration with us in respect to your payment, we are hereby once more advising you to kindly cease your communications with those impostor/scammers that has been defrauding you with endless promises of you receiving your funds but at the end to no avail.
In addition, to enable this office process your payment file, upon the receipt of this mail kindly fill the information required below and return back to us.
Below is the information required from you to facilitate your payment process.
1. Your Full Name...........
2. Your Address..................
3. Your Telephone..................
4. Age/ Sex ..............................
5. Marital status/Occupation:.....................
6. Your Identification:..................
7. Your Bank Name:........................
8. Your Bank Address:......................
9. Your Bank Swift Code or Routing No:.........
10. Your Account Number:.........................
Finally, upon the receipt of the information required above, we will process your payment file and direct it to the bank that will credit your bank account.
Yours faithfully,
Merrick B. Garland
United States Attorney General
U. S. Department of Justice.
On Wed, 12 Oct 2022 at 03:28, Sarah Yang <[email protected]> wrote:
Hey there,
Could you tell me where you are located? Also, could you tell me more about your offer?
Sarah Yang
CEO, MNesty, LLC
On 11/10/2022 20:41 PM, wrote:
> We the U.S Department Of Justice is contacting you Regarding your funds, I feel it's best and more convenient for me to explain why I am contacting you. I'm Merrick B. Garland, AG United States Department of Justice, I work hand in hand with the United States Fraud Unit of the Criminal Investigation Division (CID). I'm specialize in Background Investigations on funds which include [COMPENSATION/ INHERITANCE FUNDS, Consignment Box,] and I notice that you have being receiving numerous emails from people who claims to have funds coming to you but I advise that if you're still in communication with any of them on the issue of funds however, you're hereby advised to stop every communication right now because those people have been investigated and confirmed to be a Fraud.
>
> I wish to announce our successful investigation which was carried out a few days ago; I guess it will interest you to know why this investigation was conducted. For your information, it was truly confirmed that you have 100% Legitimate unpaid transaction and you have every right to claim these funds as you're been confirmed to be the rightful owner of the said amount $5.9 Million US COMPENSATION/INHERITANCE FUNDS.
>
> I'm informing you this today because I came to notice that you're not communicating with a legitimate person who is in charge of getting these funds to you. This announcement has to be made open to you however because you may have being swindled by those unscrupulous people whom you have sent money in the course of getting one fund or the other which is not real and for this reason, I have decided to help you get your funds directly from the International Monetary Fund (IMF) here in the United States because your Legitimate funds remain unpaid.
>
> I want to know if you're interested in receiving your unpaid legitimate funds value $5.9 Million usd however, I will only be of help if you agreed to follow my instructions. If you're really interested in receiving your unpaid $5.9 Million USD, I advise that you get back to me immediately. All I need is your cooperation and understanding.
>
> Please you can contact me back on my email by clicking your Reply.
>
> Best Regards
> Merrick B. Garland
> United States Attorney General
> U.S Department Of Justice
> contact email: [email protected]
>