Re: Today's Google Docs phish

2017-05-03 Thread David B Funk
On Wed, 3 May 2017, Alex wrote: Hi, If you haven't heard, there was a huge Google Docs phishing attack today. Several hundred bypassed our filters in the hour or so before we were able to identify them. The To address is always "h...@mailinator.com" and the subject is always " has s

Re: Today's Google Docs phish

2017-05-03 Thread John Hardin
On Wed, 3 May 2017, Alex wrote: If you haven't heard, there was a huge Google Docs phishing attack today. Our IT department actually warned us of this one... I wanted to provide an example in case it helps, even though chances are the campaign is dead. We've seen Google proxy and redirect at

Today's Google Docs phish

2017-05-03 Thread Alex
Hi, If you haven't heard, there was a huge Google Docs phishing attack today. Several hundred bypassed our filters in the hour or so before we were able to identify them. The To address is always "h...@mailinator.com" and the subject is always " has shared a document on Google Docs wit

Mail log analysis

2017-05-03 Thread David Jones
Does anyone know of a log analysis script that will give summaries of rule hits and average the SA score by sending domain? I am using MailScanner with MailWatch which puts the SA report into a MySQL database along with headers and other email details. This allows me to run some SQL queries ev