By appending just a few lines of HTML and CSS code, researcher Louis Dion-Marcil showed how an external sender could hide the very warning from an email message. Hiding "external sender" warning ...

For example: If a basic email template used the DIV IDs “Good” and “Bad” in the HTML – representing harmless and harmful content – and the CSS originally calls for “Good” to have ...