Author Topic: Spam & Phishing e-mail submission and collection  (Read 1407 times)

Offline fatih.orhan

  • Global Moderator
  • Comodo Loves me
  • *****
  • Posts: 158
Spam & Phishing e-mail submission and collection
« on: May 05, 2016, 04:18:56 PM »
Good day all,

As part of our efforts in Comodo Antispam Laboratory (CASL), we're working on a 24/7 basis for the protection of our customers from spam and phishing emails and related threats. As part of the global "Threat Intelligence Laboratory", in CASL we focus much on the proactive protection of phishing and spam, and our goal is to prevent threats before reaching our users. Recently we monitor that we're short in finding new sample emails (spam or phishing) to analyze and develop prevention methods (that's very good from one perspective but not from the other :))

For this reason, we have two requests from the community here in this forum, which helped much till now and continues to help us to improve our products and services.
1- we have created an email to report especially phishing attacks. "phishingalert@avlab.comodo.com" is the address where you may submit all kind of phishing emails you see as a threat. Whether it is from our products or not, we'll be glad to analyze them. It is possible to just forward emails you receive, but in terms of better investigation, and thorough analysis we would prefer if you add the email as an attachment and send accordingly.

2- I find this request more effective and important than the first one: we are currently analyzing millions of emails per day, to identify new threats or spams. However, we need more and up-to-date spam/phishing emails, that targets real users. If you have some email accounts that you do not use anymore, that are full of spam or promotional emails, and open to use please send us these accounts information, so that we can utilize them for a good purpose. These are small honeypots for our data collection system and the intelligence we can build on.

We would be happy to get response to these 2 requests, as well as new ideas and suggestions.

Thank you for your support and cooperation

Kind regards

mod edit x 2: fixed email address, kail.
« Last Edit: May 06, 2016, 10:59:54 AM by kail »

Offline kail

  • Randomly Appearing
  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 11361
  • The future is much like the present, only longer.
    • COMODO's free software!
Re: Spam & Phishing e-mail submission and collection
« Reply #1 on: May 05, 2016, 06:25:35 PM »
I'm not sure the email server that's processing these emails is that thrilled about receiving phishing emails. 88)
Quote
554 Rejected: mail contains virus (in reply to end of DATA command
My System Details: W10Px64 with CIS 10 Beta, Firefox & Becky!
Forum Policy.
____
The problem is not the problems, the problem is people's attitude towards those problems.

Offline fatih.orhan

  • Global Moderator
  • Comodo Loves me
  • *****
  • Posts: 158
Re: Spam & Phishing e-mail submission and collection
« Reply #2 on: May 05, 2016, 10:20:41 PM »
I'm not sure the email server that's processing these emails is that thrilled about receiving phishing emails. 88)

Too much thrill caused panic may be :)

I'm fixing this. Will inform about updates.

Offline fatih.orhan

  • Global Moderator
  • Comodo Loves me
  • *****
  • Posts: 158
Re: Spam & Phishing e-mail submission and collection
« Reply #3 on: May 06, 2016, 10:28:26 AM »
You may use phishingalert@avlab.comodo.com


mod edit: fixed email address, kail.
« Last Edit: May 06, 2016, 10:58:38 AM by kail »

Offline kail

  • Randomly Appearing
  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 11361
  • The future is much like the present, only longer.
    • COMODO's free software!
Re: Spam & Phishing e-mail submission and collection
« Reply #4 on: May 06, 2016, 11:22:49 AM »
That seems to work now. :)

Any restrictions on the emails?

I would prefer to send the full email source, not decoded, in the body of an email from me. Is that OK?
My System Details: W10Px64 with CIS 10 Beta, Firefox & Becky!
Forum Policy.
____
The problem is not the problems, the problem is people's attitude towards those problems.

Offline fatih.orhan

  • Global Moderator
  • Comodo Loves me
  • *****
  • Posts: 158
Re: Spam & Phishing e-mail submission and collection
« Reply #5 on: May 06, 2016, 11:37:46 AM »
That seems to work now. :)

Any restrictions on the emails?

I would prefer to send the full email source, not decoded, in the body of an email from me. Is that OK?

sure, any format is ok.

Offline kail

  • Randomly Appearing
  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 11361
  • The future is much like the present, only longer.
    • COMODO's free software!
Re: Spam & Phishing e-mail submission and collection
« Reply #6 on: May 07, 2016, 10:03:36 AM »
Is sending multiple suspect emails per email allowed? If so, what delimiter between the emails would you like to see?
My System Details: W10Px64 with CIS 10 Beta, Firefox & Becky!
Forum Policy.
____
The problem is not the problems, the problem is people's attitude towards those problems.

Offline fatih.orhan

  • Global Moderator
  • Comodo Loves me
  • *****
  • Posts: 158
Re: Spam & Phishing e-mail submission and collection
« Reply #7 on: May 07, 2016, 10:23:10 AM »
Single email per email is preferred. But if you want to submit multiple, you may put in an archive file or add them as separate attachments (as msg or eml file)


Offline kail

  • Randomly Appearing
  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 11361
  • The future is much like the present, only longer.
    • COMODO's free software!
Re: Spam & Phishing e-mail submission and collection
« Reply #8 on: May 07, 2016, 11:53:54 AM »
I'm currently just copying 'n' pasting the full email text as it was received from the POP server without any additional steps/software. Since I know (99.99%) that all of these are phishing emails (at best), I feel this is safer (for me).
My System Details: W10Px64 with CIS 10 Beta, Firefox & Becky!
Forum Policy.
____
The problem is not the problems, the problem is people's attitude towards those problems.

Offline bgkprathibha

  • Newbie
  • *
  • Posts: 3
Re: Spam & Phishing e-mail submission and collection
« Reply #9 on: July 04, 2016, 05:14:48 PM »
Best way is to give an option to select spam messages and report to Comodo. This saves lot of time and will also encourage more submissions.

Offline fatih.orhan

  • Global Moderator
  • Comodo Loves me
  • *****
  • Posts: 158
Re: Spam & Phishing e-mail submission and collection
« Reply #10 on: July 04, 2016, 05:16:25 PM »
can you please be more specific? Do you mean adding a link inside the email as "Report Spam"?

Offline bgkprathibha

  • Newbie
  • *
  • Posts: 3
Re: Spam & Phishing e-mail submission and collection
« Reply #11 on: July 04, 2016, 05:26:37 PM »
something like the attached.

This is from Barracuda spam filter which I used before switching to comodo.

By this way, while going through email logs, I will be able to select all Spam like mails and submit to comodo with one click for inspection and train your filters.

[attachment deleted by admin]

 

Free Endpoint Protection
Seo4Smf 2.0 © SmfMod.Com Smf Destek