Re: QR code phish?

2024-02-01 Thread Kevin A. McGrail
Hi Alex, we are definitely seeing them.  There is code in trunk for this with one of the plugins and rules in the KAM ruleset using the new code.  LMK if you need more info. On 2/1/2024 4:06 PM, Alex wrote: Hi, I'm just wondering if there is any mechanism for detecting and blocking QR code e

QR code phish?

2024-02-01 Thread Alex
Hi, I'm just wondering if there is any mechanism for detecting and blocking QR code emails? Would that require using image detection? Perhaps instead it's a database of known malicious QR codes? Has anyone even really seen any?

mimeheader multiple?

2024-02-01 Thread Jared Hall via users
SA 3.4.6. Is there any way to create a rule that hits emails with duplicate filename attachments? MAIN HEADER DECLARATION: Content-Type: multipart/mixed; boundary="=-6aIz+S039AYG/4raFdExeg==" BODY PART MIME HEADERS: --=-6aIz+S039AYG/4raFdExeg== Content-Type: application/octet-s