Hello,
I identified in a header of a phishing message a image name pattern. Below follow an example:
Content-Type: image/jpeg;
name="1560469802890.jpg"
Are 13 numbers of 0 the 9. Then, i created a custom rule to add a score for theses messages. Bellow has an example:
header JPEG_CT...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.