scan POA for non-virus content with SMG

We were just hit with a social engineering/ CEO fraud attack that our involved users did not bite on thankfully. But I have been directed to ask if twe could use something like an IMAP inteface policy to scan for emails that are not virus-ey but rather of the format [HighRankingPerson]@gmail.com. I don't think so but can SMG do something like that with the POA?

thanks,

Andrew

Parents
  • 0  
    We were just hit with a social engineering/ CEO fraud attack

    Are you currently using SMG to scan incoming email?

    While it is impossible to foresee every type of malware, SMG provides enough filter types to block the obvious ones, quarantine questionable email, and insert warnings to recipients that they are reading email originating from an external source and that they should be careful about clicking on links.

    The objective should be to keep unwanted email from entering your system rather than search for it after it has entered!

    __________
    Kevin Boyle, SuperUser

    Calgary, Alberta, Canada

Reply
  • 0  
    We were just hit with a social engineering/ CEO fraud attack

    Are you currently using SMG to scan incoming email?

    While it is impossible to foresee every type of malware, SMG provides enough filter types to block the obvious ones, quarantine questionable email, and insert warnings to recipients that they are reading email originating from an external source and that they should be careful about clicking on links.

    The objective should be to keep unwanted email from entering your system rather than search for it after it has entered!

    __________
    Kevin Boyle, SuperUser

    Calgary, Alberta, Canada

Children
  • 0 in reply to   

    100% agree and yes we scan inbound mail. This one got through. Looking at the email, it's the name of an HRP plus a demand for urgency and then a smomewhat random gmail address:

    "Hello, I hope you're not too busy at the moment. However, if you are, please prioritize this task. I need you to complete an urgent assignment immediately. No calls just respond to my email instead.
    HighRankingPerson
    Department Head
    Sent from myMail"
    Is everything I have to work with.
    Andrew