This one is a doozy, came today: Hello All
If any member receives a suspicious email from Cab Sec V2 Lee-Ann Anselmo (as per image below) can you please do the following. Please save the email as an attachment. If using Outlook you need to double click on the email to open it up and then right click go to Save As and then save it to wherever you save your files. Please then email the attachment to Scott Harrison at........ Nice trick.. On Wed, Sep 23, 2020 at 8:14 AM Seymour J Metz <[email protected]> wrote: > The commercial filters are mostly broken in all sorts of fascinating ways. > If it's an option your best choice is to find a provider competent to > select or write decent filters. > > > -- > Shmuel (Seymour J.) Metz > http://mason.gmu.edu/~smetz3 > > > ________________________________________ > From: IBM Mainframe Discussion List <[email protected]> on behalf > of Charles Mills <[email protected]> > Sent: Tuesday, September 22, 2020 5:25 PM > To: [email protected] > Subject: Re: Caution: "Hacked" email caused the distribution of a > potentially harmful attachment > > The commercial e-mail malware filters watch for e-mail where the "from" > address and the headers do not match. > > They did not used to. The *SPAM* filters watched for the mis-match, but > not the malware filters. The notorious RSA hack began with a spear-phishing > e-mail with an attachment of an Excel spreadsheet containing a zero-day > exploit. RSA's SPAM filter caught it! However, two enterprising employees > dragged the e-mail out of their SPAM folder and opened it and the attached > spreadsheet. > > Ever since then the malware filter publishers have been watching for this > mismatch and treating it as potential malware rather than merely potential > SPAM. > > Charles > > > -----Original Message----- > From: IBM Mainframe Discussion List [mailto:[email protected]] On > Behalf Of CM Poncelet > Sent: Tuesday, September 22, 2020 2:05 PM > To: [email protected] > Subject: Re: Caution: "Hacked" email caused the distribution of a > potentially harmful attachment > > Hence, check your trash/deleted folder and then create message filters > for any legitimate emails it contains, then run your message filters > against your trash/deleted folder to move the legitimate emails out of > there and into your "Inbox" folder or whatever other appropriate folders > - and these legitimate emails will then no longer be trapped as > spam/scam emails. What these 'not spam/scam' message filters should > contain and check for is up to you. > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN > -- Wayne V. Bickerdike ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
