{"id":13697,"date":"2023-12-29T02:57:12","date_gmt":"2023-12-29T02:57:12","guid":{"rendered":"https:\/\/hsclabs.com\/?p=13697"},"modified":"2025-05-27T13:07:32","modified_gmt":"2025-05-27T13:07:32","slug":"smtp-smuggling","status":"publish","type":"post","link":"https:\/\/hsclabs.com\/pt-br\/smtp-smuggling\/","title":{"rendered":"SMTP Smuggling \/ Contrabando de SMTP: entenda o novo ataque de e-mail"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"13697\" class=\"elementor elementor-13697\" data-elementor-settings=\"{&quot;ha_cmc_init_switcher&quot;:&quot;no&quot;}\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-26ade54 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"26ade54\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-df531b3\" data-id=\"df531b3\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-f7eeb21 elementor-widget elementor-widget-template\" data-id=\"f7eeb21\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"template.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-template\">\n\t\t\t\t\t<div data-elementor-type=\"section\" data-elementor-id=\"11928\" class=\"elementor elementor-11928\" data-elementor-settings=\"{&quot;ha_cmc_init_switcher&quot;:&quot;no&quot;}\" data-elementor-post-type=\"elementor_library\">\n\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-b71fdbb elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"b71fdbb\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-bbf772c\" data-id=\"bbf772c\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-cd4831a elementor-widget elementor-widget-post-info\" data-id=\"cd4831a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"post-info.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul class=\"elementor-inline-items elementor-icon-list-items elementor-post-info\">\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-repeater-item-f5a2311 elementor-inline-item\" itemprop=\"datePublished\">\n\t\t\t\t\t\t<a href=\"https:\/\/hsclabs.com\/pt-br\/2023\/12\/29\/\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"far fa-calendar-check\"><\/i>\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text elementor-post-info__item elementor-post-info__item--type-date\">\n\t\t\t\t\t\t\t<span class=\"elementor-post-info__item-prefix\">Atualizado em<\/span>\n\t\t\t\t\t\t\t\t\t\t<time>29 dezembro  2023<\/time>\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t<\/li>\n\t\t\t\t<li class=\"elementor-icon-list-item elementor-repeater-item-ecb4e32 elementor-inline-item\" itemprop=\"author\">\n\t\t\t\t\t\t<a href=\"https:\/\/hsclabs.com\/pt-br\/author\/hsc\/\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"far fa-user-circle\"><\/i>\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text elementor-post-info__item elementor-post-info__item--type-author\">\n\t\t\t\t\t\t\t\t\t\tHSC\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t<\/li>\n\t\t\t\t<li class=\"elementor-icon-list-item elementor-repeater-item-072a961 elementor-inline-item\" itemprop=\"about\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"far fa-file-alt\"><\/i>\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text elementor-post-info__item elementor-post-info__item--type-terms\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-post-info__terms-list\">\n\t\t\t\t<a href=\"https:\/\/hsclabs.com\/pt-br\/category\/analyst-report\/\" class=\"elementor-post-info__terms-list-item\">Analyst Report<\/a>\t\t\t\t<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2eb8a1e elementor-widget elementor-widget-ha-post-title happy-addon ha-post-title\" data-id=\"2eb8a1e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"ha-post-title.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"ha-post-title elementor-size-default\">SMTP Smuggling \/ Contrabando de SMTP: entenda o novo ataque de e-mail<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0f330cd elementor-widget elementor-widget-theme-post-featured-image elementor-widget-image\" data-id=\"0f330cd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"theme-post-featured-image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"1200\" height=\"627\" src=\"https:\/\/hsclabs.com\/wp-content\/uploads\/2023\/12\/SMTP-SMUGGLING.jpg\" class=\"attachment-full size-full wp-image-16207\" alt=\"\" srcset=\"https:\/\/hsclabs.com\/wp-content\/uploads\/2023\/12\/SMTP-SMUGGLING.jpg 1200w, https:\/\/hsclabs.com\/wp-content\/uploads\/2023\/12\/SMTP-SMUGGLING-300x157.jpg 300w, https:\/\/hsclabs.com\/wp-content\/uploads\/2023\/12\/SMTP-SMUGGLING-1024x535.jpg 1024w, https:\/\/hsclabs.com\/wp-content\/uploads\/2023\/12\/SMTP-SMUGGLING-768x401.jpg 768w\" sizes=\"(max-width: 1200px) 100vw, 1200px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ded4b82 elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"ded4b82\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ff2c311 elementor-widget elementor-widget-text-editor\" data-id=\"ff2c311\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><em>Por Roberto Chu e Junior Cunha<\/em><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-cad793e elementor-widget elementor-widget-text-editor\" data-id=\"cad793e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Uma nova t\u00e9cnica de ataque que permite enviar e-mails falsos veio \u00e0 tona em dezembro. \u00c9 o contrabando de SMTP, ou SMTP Smuggling, que consegue driblar protocolos de seguran\u00e7a de e-mail.<\/p><p>A t\u00e9cnica foi <a href=\"https:\/\/sec-consult.com\/blog\/detail\/smtp-smuggling-spoofing-e-mails-worldwide\/\">revelada<\/a> por Timo Longin, pesquisador refer\u00eancia em ataques DNS, em parceria com a SEC Consult.<\/p><p>Neste artigo, n\u00f3s explicamos como a t\u00e9cnica funciona e como o MailInspector consegue barr\u00e1-la.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-26cf78b elementor-widget elementor-widget-template\" data-id=\"26cf78b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"template.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-template\">\n\t\t\t\t\t<div data-elementor-type=\"section\" data-elementor-id=\"11922\" class=\"elementor elementor-11922\" data-elementor-settings=\"{&quot;ha_cmc_init_switcher&quot;:&quot;no&quot;}\" data-elementor-post-type=\"elementor_library\">\n\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-3d745e8 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"3d745e8\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-82aa485\" data-id=\"82aa485\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-185f194 elementor-toc--minimized-on-tablet elementor-widget elementor-widget-table-of-contents\" data-id=\"185f194\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;headings_by_tags&quot;:[&quot;h2&quot;,&quot;h3&quot;],&quot;marker_view&quot;:&quot;bullets&quot;,&quot;icon&quot;:{&quot;value&quot;:&quot;far fa-dot-circle&quot;,&quot;library&quot;:&quot;fa-regular&quot;},&quot;no_headings_message&quot;:&quot;N\\u00e3o foram encontrados cabe\\u00e7alhos nesta p\\u00e1gina.&quot;,&quot;minimize_box&quot;:&quot;yes&quot;,&quot;minimized_on&quot;:&quot;tablet&quot;,&quot;hierarchical_view&quot;:&quot;yes&quot;,&quot;min_height&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]},&quot;min_height_tablet&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]},&quot;min_height_mobile&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]}}\" data-widget_type=\"table-of-contents.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-toc__header\">\n\t\t\t\t\t\t<h2 class=\"elementor-toc__header-title\">\n\t\t\t\tPrincipais t\u00f3picos deste artigo\t\t\t<\/h2>\n\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-toc__toggle-button elementor-toc__toggle-button--expand\" role=\"button\" tabindex=\"0\" aria-controls=\"elementor-toc__185f194\" aria-expanded=\"true\" aria-label=\"Abrir Tabela de Conte\u00fados\"><i aria-hidden=\"true\" class=\"fas fa-chevron-down\"><\/i><\/div>\n\t\t\t\t<div class=\"elementor-toc__toggle-button elementor-toc__toggle-button--collapse\" role=\"button\" tabindex=\"0\" aria-controls=\"elementor-toc__185f194\" aria-expanded=\"true\" aria-label=\"Fechar Tabela de Conte\u00fados\"><i aria-hidden=\"true\" class=\"fas fa-chevron-up\"><\/i><\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<div id=\"elementor-toc__185f194\" class=\"elementor-toc__body\">\n\t\t\t<div class=\"elementor-toc__spinner-container\">\n\t\t\t\t<i class=\"elementor-toc__spinner eicon-animation-spin eicon-loading\" aria-hidden=\"true\"><\/i>\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3360db4 elementor-widget elementor-widget-heading\" data-id=\"3360db4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Como funciona o ataque<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ae90216 elementor-widget elementor-widget-text-editor\" data-id=\"ae90216\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>O ataque tem como alvo o protocolo SMTP (Simple Mail Transfer Protocol), utilizado pelos servidores para a troca de e-mails.<\/p><p>Em linhas gerais, o invasor consegue abusar das diferen\u00e7as na maneira como os servidores SMTP de sa\u00edda e de entrada interpretam uma sequ\u00eancia que indica o fim dos dados da mensagem.<\/p><p>Isso permite a <b>inje\u00e7\u00e3o de comandos SMTP<\/b> em mensagens de e-mail de uma forma que faz com que os servidores de recebimento as tratem como duas mensagens separadas, sendo que uma delas tem seu cabe\u00e7alho \u201cDe\u201d falsificado.\u00a0<\/p><p>Basicamente, o ataque envolve a composi\u00e7\u00e3o de dois servi\u00e7os de e-mail com diferen\u00e7as espec\u00edficas na maneira como lidam com o di\u00e1logo SMTP:<\/p><ul><li>\u00a0A mensagem \u00e9 originada em um servi\u00e7o de e-mail &#8220;A&#8221; ( geralmente com uma conta roubada\/vazada) que n\u00e3o reconhece quebras de linha malformadas no di\u00e1logo SMTP e que acaba encaminhando elas exatamente como foram recebidas.<\/li><li>\u00a0A mensagem \u00e9 direcionada para uma conta no servi\u00e7o de e-mail &#8220;B&#8221; que suporta quebras de linha malformadas no dia\u013aogo SMTP. Neste cen\u00e1rio, este servi\u00e7o \u00e9 enganado para receber duas mensagens de e-mail: uma mensagem com o conte\u00fado &#8220;leg\u00edtimo&#8221; e a outra mensagem com o cabe\u00e7alho &#8220;contrabandeado&#8221; mais o texto do corpo ap\u00f3s os comandos SMTP &#8220;contrabandeados&#8221;.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7317835 elementor-widget elementor-widget-text-editor\" data-id=\"7317835\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Al\u00e9m disso, como o envelope da mensagem principal passa com \u00eaxito nas verifica\u00e7\u00f5es de protocolos de seguran\u00e7a de e-mails, tais como SPF, DKIM e DMARC, a mensagem falsificada \u00e9 entregue nas caixas do correio eletr\u00f4nico.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-28b1ea5 elementor-widget elementor-widget-heading\" data-id=\"28b1ea5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Exemplo pr\u00e1tico de contrabando de SMTP<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3a43603 elementor-widget elementor-widget-text-editor\" data-id=\"3a43603\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>No exemplo indicado, o pesquisador insere no corpo da mensagem um comando &#8220;contrabandeado&#8221;: um &#8220;MAIL FROM&#8221; com o e-mail falso pelo qual quer se passar.<\/p><p>Por conta das diferentes interpreta\u00e7\u00f5es do protocolo SMTP, o servidor que est\u00e1 recebendo o e-mail acredita que o FROM do ENVELOPE (o remetente real) \u00e9 o MAIL FROM falso inserido no corpo do e-mail.<\/p><p>Dessa forma, o ataque burla qualquer verifica\u00e7\u00e3o dos protocolos de seguran\u00e7a de e-mail, porque para o servidor recebedor o e-mail est\u00e1 vindo do falso MAIL FROM.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3a0c49f elementor-widget elementor-widget-image\" data-id=\"3a0c49f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"800\" height=\"465\" src=\"https:\/\/hsclabs.com\/wp-content\/uploads\/2023\/12\/SMTP-smuggling-1024x595.png\" class=\"attachment-large size-large wp-image-13710\" alt=\"\" srcset=\"https:\/\/hsclabs.com\/wp-content\/uploads\/2023\/12\/SMTP-smuggling-1024x595.png 1024w, https:\/\/hsclabs.com\/wp-content\/uploads\/2023\/12\/SMTP-smuggling-300x174.png 300w, https:\/\/hsclabs.com\/wp-content\/uploads\/2023\/12\/SMTP-smuggling-768x447.png 768w, https:\/\/hsclabs.com\/wp-content\/uploads\/2023\/12\/SMTP-smuggling.png 1386w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8f7515a elementor-widget elementor-widget-heading\" data-id=\"8f7515a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Por que isso importa?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-17837b6 elementor-widget elementor-widget-text-editor\" data-id=\"17837b6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>A pesquisa mostrou que o ataque foi efetivo contra os principais provedores de servi\u00e7os de e-mail, incluindo a Microsoft, que n\u00e3o reconheceram as mensagens mal formatadas e as encaminharam de forma exata ao destinat\u00e1rio.<\/p><p>Essa falha possibilita que um cibercriminoso envie e-mails falsos se passando por milh\u00f5es de dom\u00ednios e marcas, como a pr\u00f3pria Microsoft e seus clientes (incluindo marcas famosas que j\u00e1 s\u00e3o comumente usadas em golpes de phishing).<\/p><p>Ele pode se passar, por exemplo, por um diretor da sua institui\u00e7\u00e3o solicitando o pagamento de um boleto; ou pelo contato de suporte do Outlook, exigindo que um usu\u00e1rio troque ou compartilhe sua senha.<\/p><p>Nos exemplo que baseia a pesquisa, por exemplo, um e-mail falso com o remetente &#8220;admin@outlook.com&#8221; foi enviado com \u00eaxito.\u00a0<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-687ece8 elementor-widget elementor-widget-heading\" data-id=\"687ece8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Como o MailInspector protege contra contrabando de SMTP<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4f206af elementor-widget elementor-widget-text-editor\" data-id=\"4f206af\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p dir=\"ltr\">Embora o SMTP Smuggling burle os mecanismos de autentica\u00e7\u00e3o de servidores de e-mails, o sistema de intelig\u00eancia do <a href=\"https:\/\/hsclabs.com\/pt-br\/mailinspector\/\">MailInspector<\/a> captura os falsos e-mails com base em seu contexto e em diversos outros pontos de an\u00e1lise.<\/p><p dir=\"ltr\">Al\u00e9m disso, o MailInspector tamb\u00e9m possui mecanismos complementares de prote\u00e7\u00e3o que atuam em outras etapas no di\u00e1logo SMTP, detectando muitos outros ataques que exploram ou possam vir a explorar vulnerabilidades do protocolo SMTP.<\/p><p dir=\"ltr\">Outra vantagem do MailInspector \u00e9 sua abordagem \u00fanica que combina Secure Email Gateway + API, o que permite uma integra\u00e7\u00e3o total com os provedores de e-mail e possibilita entender os diferentes vetores de ataque para agir de forma efetiva.<\/p><p dir=\"ltr\">Ademais, seguindo sempre as melhores pr\u00e1ticas, o time de engenharia da HSC, em conformidade com o tempo de resposta\/resolu\u00e7\u00e3o padr\u00e3o no mercado de Seguran\u00e7a da Informa\u00e7\u00e3o, atuou rapidamente e em menos de 24h disponibilizou a corre\u00e7\u00e3o\/mitiga\u00e7\u00e3o desta vulnerabilidade. Realizamos testes com diversas amostras recebidas e os resultados foram efetivos.<\/p><p dir=\"ltr\"><strong>Portanto, o MailInspector j\u00e1 conta com prote\u00e7\u00e3o ativada contra os ataques de SMTP Smuggling.<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-67e81bd elementor-widget elementor-widget-text-editor\" data-id=\"67e81bd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b><i>Refer\u00eancias:<\/i><\/b><\/p><p><a href=\"https:\/\/sec-consult.com\/blog\/detail\/smtp-smuggling-spoofing-e-mails-worldwide\/\">https:\/\/sec-consult.com\/blog\/detail\/smtp-smuggling-spoofing-e-mails-worldwide\/<\/a><\/p><p><a href=\"https:\/\/gbhackers.com\/new-smtp-smuggling-attack\/\">https:\/\/gbhackers.com\/new-smtp-smuggling-attack\/<\/a><\/p><p><a href=\"https:\/\/www.internationalit.com\/post\/smtp-smuggling-nova-t%C3%A9cnica-permite-burlar-protocolos-de-autentica%C3%A7%C3%A3o#:~:text=2%20min-,SMTP%20Smuggling%3A%20Nova%20t%C3%A9cnica%20permite%20burlar%20protocolos%20de%20autentica%C3%A7%C3%A3o,driblar%20os%20mecanismos%20de%20autentica%C3%A7%C3%A3o\">https:\/\/www.internationalit.com\/post\/smtp-smuggling-nova-t%C3%A9cnica-permite-burlar-protocolos-de-autentica%C3%A7%C3%A3o#:~:text=2%20min-,SMTP%20Smuggling%3A%20Nova%20t%C3%A9cnica%20permite%20burlar%20protocolos%20de%20autentica%C3%A7%C3%A3o,driblar%20os%20mecanismos%20de%20autentica%C3%A7%C3%A3o<\/a><\/p><p><a href=\"https:\/\/www.linuxadictos.com\/pt\/smtp-smuggling-una-tecnica-que-permite-enviar-correos-electronicos-falsos.html\">https:\/\/www.linuxadictos.com\/pt\/smtp-smuggling-una-tecnica-que-permite-enviar-correos-electronicos-falsos.html<\/a><\/p><p>\u00a0<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-d387d54\" data-id=\"d387d54\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-7fb8f92 elementor-widget elementor-widget-template\" data-id=\"7fb8f92\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"template.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-template\">\n\t\t\t\t\t<div data-elementor-type=\"section\" data-elementor-id=\"11911\" class=\"elementor elementor-11911\" data-elementor-settings=\"{&quot;ha_cmc_init_switcher&quot;:&quot;no&quot;}\" data-elementor-post-type=\"elementor_library\">\n\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-f0e534a elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"f0e534a\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-a9b195e\" data-id=\"a9b195e\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-861ae4f elementor-invisible elementor-widget elementor-widget-image\" data-id=\"861ae4f\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;zoomInRight&quot;}\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/hsclabs.com\/pt-br\/hsc-global-cyber-alliance-parceria\/\">\n\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/hsclabs.com\/wp-content\/uploads\/2023\/11\/selo-proud-partner-gca-black.png\" title=\"selo-proud-partner-gca-black\" alt=\"selo-proud-partner-gca-black\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-5b4e6f2 elementor-section-boxed elementor-section-height-default elementor-section-height-default elementor-invisible\" data-id=\"5b4e6f2\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;animation&quot;:&quot;slideInRight&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-inner-column elementor-element elementor-element-4fb5e7e\" data-id=\"4fb5e7e\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-0008fa9 elementor-widget elementor-widget-heading\" data-id=\"0008fa9\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<p class=\"elementor-heading-title elementor-size-default\">Inscreva-se para receber not\u00edcias de cybersecurity<\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d77ffec elementor-button-align-stretch elementor-widget elementor-widget-form\" data-id=\"d77ffec\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;step_next_label&quot;:&quot;Next&quot;,&quot;step_previous_label&quot;:&quot;Previous&quot;,&quot;button_width&quot;:&quot;100&quot;,&quot;step_type&quot;:&quot;number_text&quot;,&quot;step_icon_shape&quot;:&quot;circle&quot;}\" data-widget_type=\"form.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<form class=\"elementor-form\" method=\"post\" name=\"Form Newsletter\" aria-label=\"Form Newsletter\">\n\t\t\t<input type=\"hidden\" name=\"post_id\" value=\"11911\"\/>\n\t\t\t<input type=\"hidden\" name=\"form_id\" value=\"d77ffec\"\/>\n\t\t\t<input type=\"hidden\" name=\"referer_title\" value=\"HSC Cybersecurity\" \/>\n\n\t\t\t\n\t\t\t<div class=\"elementor-form-fields-wrapper elementor-labels-\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-field-type-text elementor-field-group elementor-column elementor-field-group-name elementor-col-100\">\n\t\t\t\t\t\t\t\t\t\t\t\t<label for=\"form-field-name\" class=\"elementor-field-label elementor-screen-only\">\n\t\t\t\t\t\t\t\tNome\t\t\t\t\t\t\t<\/label>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<input size=\"1\" type=\"text\" name=\"form_fields[name]\" id=\"form-field-name\" class=\"elementor-field elementor-size-xs  elementor-field-textual\" placeholder=\"Nome\">\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"elementor-field-type-email elementor-field-group elementor-column elementor-field-group-email elementor-col-100 elementor-field-required\">\n\t\t\t\t\t\t\t\t\t\t\t\t<label for=\"form-field-email\" class=\"elementor-field-label elementor-screen-only\">\n\t\t\t\t\t\t\t\tEmail\t\t\t\t\t\t\t<\/label>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<input size=\"1\" type=\"email\" name=\"form_fields[email]\" id=\"form-field-email\" class=\"elementor-field elementor-size-xs  elementor-field-textual\" placeholder=\"Email\" required=\"required\">\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"elementor-field-type-select elementor-field-group elementor-column elementor-field-group-field_92fe65d elementor-col-100 elementor-field-required\">\n\t\t\t\t\t\t\t\t\t\t\t\t<label for=\"form-field-field_92fe65d\" class=\"elementor-field-label elementor-screen-only\">\n\t\t\t\t\t\t\t\tCargo\t\t\t\t\t\t\t<\/label>\n\t\t\t\t\t\t\t\t<div class=\"elementor-field elementor-select-wrapper remove-before \">\n\t\t\t<div class=\"select-caret-down-wrapper\">\n\t\t\t\t<i aria-hidden=\"true\" class=\"eicon-caret-down\"><\/i>\t\t\t<\/div>\n\t\t\t<select name=\"form_fields[field_92fe65d]\" id=\"form-field-field_92fe65d\" class=\"elementor-field-textual elementor-size-xs\" required=\"required\">\n\t\t\t\t\t\t\t\t\t<option value=\"Especialista em Ciberseguran\u00e7a\">Especialista em Ciberseguran\u00e7a<\/option>\n\t\t\t\t\t\t\t\t\t<option value=\"Analista de TI\">Analista de TI<\/option>\n\t\t\t\t\t\t\t\t\t<option value=\"Gerente de TI\">Gerente de TI<\/option>\n\t\t\t\t\t\t\t\t\t<option value=\"CIO ou CISO\">CIO ou CISO<\/option>\n\t\t\t\t\t\t\t\t\t<option value=\"CTO\">CTO<\/option>\n\t\t\t\t\t\t\t\t\t<option value=\"Desenvolvedor ou Arquiteto\">Desenvolvedor ou Arquiteto<\/option>\n\t\t\t\t\t\t\t\t\t<option value=\"CEO ou Diretor\">CEO ou Diretor<\/option>\n\t\t\t\t\t\t\t\t\t<option value=\"Profissional de Compliance\">Profissional de Compliance<\/option>\n\t\t\t\t\t\t\t\t\t<option value=\"Profissional Jur\u00eddico\">Profissional Jur\u00eddico<\/option>\n\t\t\t\t\t\t\t\t\t<option value=\"Profissional de Vendas \">Profissional de Vendas <\/option>\n\t\t\t\t\t\t\t\t\t<option value=\"Profissional de Marketing\">Profissional de Marketing<\/option>\n\t\t\t\t\t\t\t\t\t<option value=\"Profissional de RH\">Profissional de RH<\/option>\n\t\t\t\t\t\t\t\t\t<option value=\"Outro\">Outro<\/option>\n\t\t\t\t\t\t\t<\/select>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"elementor-field-type-acceptance elementor-field-group elementor-column elementor-field-group-field_3197ff8 elementor-col-100 elementor-field-required\">\n\t\t\t\t\t\t\t\t\t\t\t\t<label for=\"form-field-field_3197ff8\" class=\"elementor-field-label elementor-screen-only\">\n\t\t\t\t\t\t\t\tCheck\t\t\t\t\t\t\t<\/label>\n\t\t\t\t\t\t\t\t<div class=\"elementor-field-subgroup\">\n\t\t\t<span class=\"elementor-field-option\">\n\t\t\t\t<input type=\"checkbox\" name=\"form_fields[field_3197ff8]\" id=\"form-field-field_3197ff8\" class=\"elementor-field elementor-size-xs  elementor-acceptance-field\" required=\"required\">\n\t\t\t\t<label for=\"form-field-field_3197ff8\"><font size=\"1\"> Concordo com a <a href=\"https:\/\/hsclabs.com\/pt-br\/aviso-de-privacidade\/\">Pol\u00edtica de Privacidade<\/a> e dou o consentimento para o tratamento dos meus dados.<\/font><\/label>\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"elementor-field-group elementor-column elementor-field-type-submit elementor-col-100 e-form__buttons\">\n\t\t\t\t\t<button class=\"elementor-button elementor-size-xs elementor-animation-grow\" type=\"submit\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Enviar<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/button>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/form>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-410d8c8 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"410d8c8\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;sticky&quot;:&quot;top&quot;,&quot;sticky_on&quot;:[&quot;desktop&quot;],&quot;sticky_offset&quot;:75,&quot;sticky_effects_offset&quot;:50,&quot;_ha_eqh_enable&quot;:false,&quot;sticky_anchor_link_offset&quot;:0}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-11f3a71\" data-id=\"11f3a71\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-01150fe elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"01150fe\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;animation&quot;:&quot;none&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-inner-column elementor-element elementor-element-46c6b70\" data-id=\"46c6b70\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-f2c93e3 elementor-widget elementor-widget-heading\" data-id=\"f2c93e3\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<p class=\"elementor-heading-title elementor-size-default\">Bloqueie ataques que passam despercebidos por Microsoft e Google<\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7b35ca5 elementor-widget elementor-widget-image\" data-id=\"7b35ca5\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;none&quot;}\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/hsclabs.com\/pt-br\/protecao-para-microsoft-365\/\" target=\"_blank\">\n\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/hsclabs.com\/wp-content\/uploads\/2023\/11\/Microsoft-365-color.png\" title=\"Microsoft-365-color\" alt=\"Microsoft-365-color\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ef354be elementor-widget elementor-widget-image\" data-id=\"ef354be\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;none&quot;}\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/hsclabs.com\/pt-br\/protecao-para-google-workspace\/\" target=\"_blank\">\n\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/hsclabs.com\/wp-content\/uploads\/2023\/11\/Google-workspace-color.png\" title=\"Google-workspace-color\" alt=\"Google-workspace-color\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-d553f0d elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"d553f0d\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;animation&quot;:&quot;none&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-inner-column elementor-element elementor-element-628b068\" data-id=\"628b068\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-188fcee elementor-widget elementor-widget-spacer\" data-id=\"188fcee\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-d96b708 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"d96b708\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;animation&quot;:&quot;none&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-inner-column elementor-element elementor-element-391d788\" data-id=\"391d788\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-c855e45 elementor-widget elementor-widget-heading\" data-id=\"c855e45\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<p class=\"elementor-heading-title elementor-size-default\">Treine a sua equipe em ciberseguran\u00e7a<\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2ef48b8 elementor-align-center elementor-widget elementor-widget-button\" data-id=\"2ef48b8\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;none&quot;}\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-md elementor-animation-grow\" href=\"https:\/\/hsclabs.com\/pt-br\/mindaware\/\" target=\"_blank\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Comece Agora<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>SMTP Smuggling \/ Contrabando de SMTP: entenda o novo ataque de e-mail Por Roberto Chu e Junior Cunha Uma nova t\u00e9cnica de ataque que permite enviar e-mails falsos veio \u00e0 tona em dezembro. \u00c9 o contrabando de SMTP, ou SMTP Smuggling, que consegue driblar protocolos de seguran\u00e7a de e-mail. A t\u00e9cnica foi revelada por Timo [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":16207,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[53],"tags":[],"class_list":["post-13697","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-analyst-report"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>SMTP Smuggling \/ Contrabando de SMTP: entenda o novo ataque de e-mail - HSC Labs<\/title>\n<meta name=\"description\" content=\"Veja como funciona o contrabando de SMTP, t\u00e9cnica de ataque que permite enviar e-mails falsos e driblar protocolos de seguran\u00e7a de e-mail.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/hsclabs.com\/pt-br\/smtp-smuggling\/\" \/>\n<meta property=\"og:locale\" content=\"pt_BR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SMTP Smuggling \/ Contrabando de SMTP: entenda o novo ataque de e-mail - HSC Labs\" \/>\n<meta property=\"og:description\" content=\"Veja como funciona o contrabando de SMTP, t\u00e9cnica de ataque que permite enviar e-mails falsos e driblar protocolos de seguran\u00e7a de e-mail.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/hsclabs.com\/pt-br\/smtp-smuggling\/\" \/>\n<meta property=\"og:site_name\" content=\"HSC Labs\" \/>\n<meta property=\"article:published_time\" content=\"2023-12-29T02:57:12+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-05-27T13:07:32+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/hsclabs.com\/wp-content\/uploads\/2023\/12\/SMTP-SMUGGLING.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"627\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"HSC\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"HSC\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. tempo de leitura\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/hsclabs.com\\\/pt-br\\\/smtp-smuggling\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/hsclabs.com\\\/pt-br\\\/smtp-smuggling\\\/\"},\"author\":{\"name\":\"HSC\",\"@id\":\"https:\\\/\\\/hsclabs.com\\\/pt-br\\\/#\\\/schema\\\/person\\\/aa3e38b2984d1b9331eb9cdcc5d11418\"},\"headline\":\"SMTP Smuggling \\\/ Contrabando de SMTP: entenda o novo ataque de e-mail\",\"datePublished\":\"2023-12-29T02:57:12+00:00\",\"dateModified\":\"2025-05-27T13:07:32+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/hsclabs.com\\\/pt-br\\\/smtp-smuggling\\\/\"},\"wordCount\":847,\"publisher\":{\"@id\":\"https:\\\/\\\/hsclabs.com\\\/pt-br\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/hsclabs.com\\\/pt-br\\\/smtp-smuggling\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/hsclabs.com\\\/wp-content\\\/uploads\\\/2023\\\/12\\\/SMTP-SMUGGLING.jpg\",\"articleSection\":[\"Analyst Report\"],\"inLanguage\":\"pt-BR\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/hsclabs.com\\\/pt-br\\\/smtp-smuggling\\\/\",\"url\":\"https:\\\/\\\/hsclabs.com\\\/pt-br\\\/smtp-smuggling\\\/\",\"name\":\"SMTP Smuggling \\\/ Contrabando de SMTP: entenda o novo ataque de e-mail - HSC Labs\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/hsclabs.com\\\/pt-br\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/hsclabs.com\\\/pt-br\\\/smtp-smuggling\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/hsclabs.com\\\/pt-br\\\/smtp-smuggling\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/hsclabs.com\\\/wp-content\\\/uploads\\\/2023\\\/12\\\/SMTP-SMUGGLING.jpg\",\"datePublished\":\"2023-12-29T02:57:12+00:00\",\"dateModified\":\"2025-05-27T13:07:32+00:00\",\"description\":\"Veja como funciona o contrabando de SMTP, t\u00e9cnica de ataque que permite enviar e-mails falsos e driblar protocolos de seguran\u00e7a de e-mail.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/hsclabs.com\\\/pt-br\\\/smtp-smuggling\\\/#breadcrumb\"},\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/hsclabs.com\\\/pt-br\\\/smtp-smuggling\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/hsclabs.com\\\/pt-br\\\/smtp-smuggling\\\/#primaryimage\",\"url\":\"https:\\\/\\\/hsclabs.com\\\/wp-content\\\/uploads\\\/2023\\\/12\\\/SMTP-SMUGGLING.jpg\",\"contentUrl\":\"https:\\\/\\\/hsclabs.com\\\/wp-content\\\/uploads\\\/2023\\\/12\\\/SMTP-SMUGGLING.jpg\",\"width\":1200,\"height\":627},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/hsclabs.com\\\/pt-br\\\/smtp-smuggling\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/hsclabs.com\\\/pt-br\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"SMTP Smuggling \\\/ Contrabando de SMTP: entenda o novo ataque de e-mail\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/hsclabs.com\\\/pt-br\\\/#website\",\"url\":\"https:\\\/\\\/hsclabs.com\\\/pt-br\\\/\",\"name\":\"HSC Cybersecurity\",\"description\":\"Full-scope cybersecurity solutions\",\"publisher\":{\"@id\":\"https:\\\/\\\/hsclabs.com\\\/pt-br\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/hsclabs.com\\\/pt-br\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pt-BR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/hsclabs.com\\\/pt-br\\\/#organization\",\"name\":\"HSC Cybersecurity\",\"url\":\"https:\\\/\\\/hsclabs.com\\\/pt-br\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/hsclabs.com\\\/pt-br\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/hsclabs.com\\\/wp-content\\\/uploads\\\/2023\\\/07\\\/cropped-Logo-HSC-01.png\",\"contentUrl\":\"https:\\\/\\\/hsclabs.com\\\/wp-content\\\/uploads\\\/2023\\\/07\\\/cropped-Logo-HSC-01.png\",\"width\":1496,\"height\":510,\"caption\":\"HSC Cybersecurity\"},\"image\":{\"@id\":\"https:\\\/\\\/hsclabs.com\\\/pt-br\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/high-security-center\\\/\",\"https:\\\/\\\/www.instagram.com\\\/hsclabs\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/hsclabs.com\\\/pt-br\\\/#\\\/schema\\\/person\\\/aa3e38b2984d1b9331eb9cdcc5d11418\",\"name\":\"HSC\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/dfca8e3eab334d35b0474febe486aa4e9d11f4b455beb1d2ad54d111e5e9f74f?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/dfca8e3eab334d35b0474febe486aa4e9d11f4b455beb1d2ad54d111e5e9f74f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/dfca8e3eab334d35b0474febe486aa4e9d11f4b455beb1d2ad54d111e5e9f74f?s=96&d=mm&r=g\",\"caption\":\"HSC\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"SMTP Smuggling \/ Contrabando de SMTP: entenda o novo ataque de e-mail - HSC Labs","description":"Veja como funciona o contrabando de SMTP, t\u00e9cnica de ataque que permite enviar e-mails falsos e driblar protocolos de seguran\u00e7a de e-mail.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/hsclabs.com\/pt-br\/smtp-smuggling\/","og_locale":"pt_BR","og_type":"article","og_title":"SMTP Smuggling \/ Contrabando de SMTP: entenda o novo ataque de e-mail - HSC Labs","og_description":"Veja como funciona o contrabando de SMTP, t\u00e9cnica de ataque que permite enviar e-mails falsos e driblar protocolos de seguran\u00e7a de e-mail.","og_url":"https:\/\/hsclabs.com\/pt-br\/smtp-smuggling\/","og_site_name":"HSC Labs","article_published_time":"2023-12-29T02:57:12+00:00","article_modified_time":"2025-05-27T13:07:32+00:00","og_image":[{"width":1200,"height":627,"url":"https:\/\/hsclabs.com\/wp-content\/uploads\/2023\/12\/SMTP-SMUGGLING.jpg","type":"image\/jpeg"}],"author":"HSC","twitter_card":"summary_large_image","twitter_misc":{"Escrito por":"HSC","Est. tempo de leitura":"7 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/hsclabs.com\/pt-br\/smtp-smuggling\/#article","isPartOf":{"@id":"https:\/\/hsclabs.com\/pt-br\/smtp-smuggling\/"},"author":{"name":"HSC","@id":"https:\/\/hsclabs.com\/pt-br\/#\/schema\/person\/aa3e38b2984d1b9331eb9cdcc5d11418"},"headline":"SMTP Smuggling \/ Contrabando de SMTP: entenda o novo ataque de e-mail","datePublished":"2023-12-29T02:57:12+00:00","dateModified":"2025-05-27T13:07:32+00:00","mainEntityOfPage":{"@id":"https:\/\/hsclabs.com\/pt-br\/smtp-smuggling\/"},"wordCount":847,"publisher":{"@id":"https:\/\/hsclabs.com\/pt-br\/#organization"},"image":{"@id":"https:\/\/hsclabs.com\/pt-br\/smtp-smuggling\/#primaryimage"},"thumbnailUrl":"https:\/\/hsclabs.com\/wp-content\/uploads\/2023\/12\/SMTP-SMUGGLING.jpg","articleSection":["Analyst Report"],"inLanguage":"pt-BR"},{"@type":"WebPage","@id":"https:\/\/hsclabs.com\/pt-br\/smtp-smuggling\/","url":"https:\/\/hsclabs.com\/pt-br\/smtp-smuggling\/","name":"SMTP Smuggling \/ Contrabando de SMTP: entenda o novo ataque de e-mail - HSC Labs","isPartOf":{"@id":"https:\/\/hsclabs.com\/pt-br\/#website"},"primaryImageOfPage":{"@id":"https:\/\/hsclabs.com\/pt-br\/smtp-smuggling\/#primaryimage"},"image":{"@id":"https:\/\/hsclabs.com\/pt-br\/smtp-smuggling\/#primaryimage"},"thumbnailUrl":"https:\/\/hsclabs.com\/wp-content\/uploads\/2023\/12\/SMTP-SMUGGLING.jpg","datePublished":"2023-12-29T02:57:12+00:00","dateModified":"2025-05-27T13:07:32+00:00","description":"Veja como funciona o contrabando de SMTP, t\u00e9cnica de ataque que permite enviar e-mails falsos e driblar protocolos de seguran\u00e7a de e-mail.","breadcrumb":{"@id":"https:\/\/hsclabs.com\/pt-br\/smtp-smuggling\/#breadcrumb"},"inLanguage":"pt-BR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/hsclabs.com\/pt-br\/smtp-smuggling\/"]}]},{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/hsclabs.com\/pt-br\/smtp-smuggling\/#primaryimage","url":"https:\/\/hsclabs.com\/wp-content\/uploads\/2023\/12\/SMTP-SMUGGLING.jpg","contentUrl":"https:\/\/hsclabs.com\/wp-content\/uploads\/2023\/12\/SMTP-SMUGGLING.jpg","width":1200,"height":627},{"@type":"BreadcrumbList","@id":"https:\/\/hsclabs.com\/pt-br\/smtp-smuggling\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/hsclabs.com\/pt-br\/"},{"@type":"ListItem","position":2,"name":"SMTP Smuggling \/ Contrabando de SMTP: entenda o novo ataque de e-mail"}]},{"@type":"WebSite","@id":"https:\/\/hsclabs.com\/pt-br\/#website","url":"https:\/\/hsclabs.com\/pt-br\/","name":"HSC Cybersecurity","description":"Full-scope cybersecurity solutions","publisher":{"@id":"https:\/\/hsclabs.com\/pt-br\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/hsclabs.com\/pt-br\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pt-BR"},{"@type":"Organization","@id":"https:\/\/hsclabs.com\/pt-br\/#organization","name":"HSC Cybersecurity","url":"https:\/\/hsclabs.com\/pt-br\/","logo":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/hsclabs.com\/pt-br\/#\/schema\/logo\/image\/","url":"https:\/\/hsclabs.com\/wp-content\/uploads\/2023\/07\/cropped-Logo-HSC-01.png","contentUrl":"https:\/\/hsclabs.com\/wp-content\/uploads\/2023\/07\/cropped-Logo-HSC-01.png","width":1496,"height":510,"caption":"HSC Cybersecurity"},"image":{"@id":"https:\/\/hsclabs.com\/pt-br\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/high-security-center\/","https:\/\/www.instagram.com\/hsclabs"]},{"@type":"Person","@id":"https:\/\/hsclabs.com\/pt-br\/#\/schema\/person\/aa3e38b2984d1b9331eb9cdcc5d11418","name":"HSC","image":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/secure.gravatar.com\/avatar\/dfca8e3eab334d35b0474febe486aa4e9d11f4b455beb1d2ad54d111e5e9f74f?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/dfca8e3eab334d35b0474febe486aa4e9d11f4b455beb1d2ad54d111e5e9f74f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/dfca8e3eab334d35b0474febe486aa4e9d11f4b455beb1d2ad54d111e5e9f74f?s=96&d=mm&r=g","caption":"HSC"}}]}},"_links":{"self":[{"href":"https:\/\/hsclabs.com\/pt-br\/wp-json\/wp\/v2\/posts\/13697","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hsclabs.com\/pt-br\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hsclabs.com\/pt-br\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hsclabs.com\/pt-br\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/hsclabs.com\/pt-br\/wp-json\/wp\/v2\/comments?post=13697"}],"version-history":[{"count":16,"href":"https:\/\/hsclabs.com\/pt-br\/wp-json\/wp\/v2\/posts\/13697\/revisions"}],"predecessor-version":[{"id":16211,"href":"https:\/\/hsclabs.com\/pt-br\/wp-json\/wp\/v2\/posts\/13697\/revisions\/16211"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/hsclabs.com\/pt-br\/wp-json\/wp\/v2\/media\/16207"}],"wp:attachment":[{"href":"https:\/\/hsclabs.com\/pt-br\/wp-json\/wp\/v2\/media?parent=13697"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hsclabs.com\/pt-br\/wp-json\/wp\/v2\/categories?post=13697"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hsclabs.com\/pt-br\/wp-json\/wp\/v2\/tags?post=13697"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}