While the phishing sample Inky analyzed looked like an ordinary fake voicemail notification scam email, a second take revealed that the 'Office 365' logo was actually text-based and in the plain ...

yep, that's my question. can I just create any .html file with html/css/pictures/links, and insert the code into an email using an email client (in my case, Apple's Mail.app on MacOS X Tiger 10.4 ...

CSS tracking can only be prevented with text-based emails that do not use CSS. This is why Protonmail is the only client in the study that relies on obfuscation and loads all CSS content via a proxy.

post one of the emails, that would help.<BR><BR>Also, you should have the CSS in the html file itself, nmot linked from an external server.

By putting the CSS inside the body tag, it will be read by most email clients. For them, we CREATE very clean, hard-coded HTML, without using any HTML generator tool such as Dreamweaver, and ...