Interesting infographic from the Marketing Tech Blog about how DMARC (Domain-based Message Authentication, Reporting and Conformance) approaches phishing.
Fingerprint: 45804CAD853F9B306353DE971455C18D
Passion, Persistence, Perception
Recommended Reading for Social Engineers
Ghost in the Wires: My Adventures as the World’s Most Wanted Hacker
By: Kevin Mitnick
It’s not hard to get a (free) SSL certificate, set up DKIM/SPF records for a domain that appears trustworthy and use DMARC against itself to improve success rates.
Such sophistication is already a reality:
http://blog.norsecorp.com/2015/03/05/torrentlocker-ransomware-devs-abuse-dmarc-email-authentication/