Jump to content

Phishing protection problems


Recommended Posts

We are getting phishing emails for Office365 credentials that make it through the ECOS filter. I've chatted with helpdesk and they had me submit samples to samples@eset.com  My question is "How does the filter check for phishing?" These emails were blatantly phishing emails. I've seen other emails where the creators were creative and made it past the filter but these were obvious.

Are they only checked by known sender?

Is the content of the email not checked?

Just curious.

Link to comment
Share on other sites

  • Administrators

Would it be possible to get those in the msg or eml format? Emails are analyzed complexly by antispam protection, it's not just the sender or the content of the email that is important for being recognized as spam.

Link to comment
Share on other sites

9 hours ago, Marcos said:

Would it be possible to get those in the msg or eml format? Emails are analyzed complexly by antispam protection, it's not just the sender or the content of the email that is important for being recognized as spam.

Sent. Thanks.

Link to comment
Share on other sites

  • 2 weeks later...

Does anyone monitor the samples@eset.com ? Should I be sending anything I come across or does someone only monitor it if they requested someone to send a sample? I just don't want to send items there if it's not going to do any good.

Link to comment
Share on other sites

  • Administrators

I see 3 tickets from your email address there, all were processed and urls were blocked.

If you want to report an undetected spam, follow the instructions at https://support.eset.com/en/kb141:

If you are using ESET Cloud Office Security, use dedicated email addresses nospam_ecos[at]eset.com and spam_ecos[at]eset.com to report false positive (FP) / false negative (FN) detections for spam. For detailed instructions, see ECOS Online Help.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...