Collected research
Styled to Steal: The Overlooked Attack Surface in Email Clients
Injecting standard CSS into an encrypted email lets an attacker read its decrypted text: attacker-crafted font ligatures give the plaintext a content-dependent width, container queries measure that width, and each width loads a distinct remote image. Plaintext comes out character by character with no JavaScript, in Thunderbird and KMail.
Record
- Researcher
- Leon Trampert, Daniel Weber, Christian Rossow and Michael Schwarz
- Published by
- doi.org
- Topic
- Other
In the archive
Related sources
- Artifact Repository
Tags
This page is the archive's own catalogue record. The research is the work of Leon Trampert, Daniel Weber, Christian Rossow and Michael Schwarz, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .