How do hackers carry out a Mass Email Attack? – Kali Linux [Tutorial]

Mass emailing is not a new topic for the ethical hacking community.

Specifically, there are cases in which we need to send mass emails during penetration tests / phishing tests (to be more specific).

Penetration testers often need to send bulk emails to employees of a company for which they are conducting the penetration test.

However, although there are several Bulk Mail sending software available, nothing compares to the Bulk sending tool that is available in our favorite penetration testing OS: Kali Linux.

[su_button url=”https://www.secnews.gr/103702/httrack-kali-linux/” target=”blank” style=”soft” background=”#eaf7b8″ color=”#0404047″ wide=”yes” center=”yes” radius=”20″ icon_color=”#ffffff”]Read also: Create a clone of any Website with HTTrack [Kali Linux][/su_button]

[su_button url=”https://www.secnews.gr/103702/httrack-kali-linux/” target=”blank” style=”soft” background=”#eaf7b8″ color=”#0404047″ wide=”yes” center=”yes” radius=”20″ icon_color=”#ffffff”]Read also: Create a clone of any Website with HTTrack [Kali Linux][/su_button]

The purpose of these tutorials is purely educational and we hack our systems as a proof of concept and never to conduct any black hat activity.

[alert size=”alert-block” variation=”alert-error”]ATTENTION!
The following material is for EDUCATIONAL PURPOSES ONLY!
SecNews.gr assumes NO RESPONSIBILITY for any illegal acts![/alert]

In today's article we will deal with sending mass emails with the help of Kali Linux and SET (Social Engineering Toolkit)

To start the Mass email attack process, you must have a list of emails at your disposal, it can be either your own personal list, or one given to you by the company for which you will be conducting the penetration test.

First, we will open the Social Engineering Toolkit, SET:

Open Terminal and type:

se-toolkit

Select Social engineering – Option 1

Now, if we want to carry out a mass email attack (Mass Mailer attack select option 5

Option 5 : Mass Mailer Attack

Then select Option 2 for email mass mailer, since in this article we will be dealing with Email Mass sender and not with an Email Address. Option 1 will be useful for spear-phish attacks.

Option 2 : Email Attack Mass Mailer

Now you need to set the path to the email list . In our case it is email_list , just add the file-name with the path .

Now select option 1 since we will use a gmail account to send the mass emails, since we do not have an SMTP server. In case you have an E-mail server / SMTP (like professional spammers do) server you can discover other options.

Option 1 : Use a Gmail account for email attacks

Enter your gmail address. The email address must be correct and you must also have its password in order to be able to successfully send emails.

Then enter the name you want recipients to see in their Inbox. This is the name that will be the first thing your 'victims' will see!

Pay close attention to this field in particular, because it is one of the most important fields in which the 'battle' of real social engineering is judged!

For example, it could be “Admin” in the case of a spear phish attack.

Now SET will ask you to enter the password for the email account. Enter the gmail password

You then have the option to specify whether or not you wish to flag this message and set it as 'High priority'. Sometimes this may work, other times it may make your victims more suspicious. So it is recommended to use this feature as appropriate.

SET will then ask you to enter a subject for the email. Type the subject.

In the next step you will be asked if you want the body of the message to be in HTML or plain text format. Select P for plain text or H for html.

Enter the body text

Enter the body of the email here. If you select HTML message then you will need to enter the HTML tags as well.

Press Control + C to send the email and Enter to go back to the main menu.

[su_button url=”https://www.secnews.gr/102964/vega-kali-linux/” target=”blank” style=”soft” background=”#f7b8e3″ color=”#0404047″ wide=”yes” center=”yes” radius=”20″ icon_color=”#ffffff”]See more: Vega: How to check for vulnerabilities in Kali Linux[/su_button]

This is how hackers carry out a mass email attack.

[su_box title=”If you liked our article…” style=”soft” box_color=”#f6f9f8″ title_color=”#6dc891″]If you liked our article, share it with your friends! :)[/su_box]