The Chief Executive Officer (CEO) received an email from the Chief Financial Officer (CFO), asking the CEO to send financial details. The CEO thought it was strange that the CFO would ask for the financial details via email. The email address was correct in the "From" section of the email. The CEO clicked the form and sent the financial information as requested. Which of the following caused the incident?

Question

Quizplus · Accepted Answer

The incident was likely caused by the lack of SPF (Sender Policy Framework) being enabled, which would allow email spoofing to occur. This means that an attacker could send an email that appears to come from a legitimate address, such as the CFO's, leading the CEO to believe the request was genuine.

The Chief Executive Officer (CEO) Received an Email from the Chief