Wednesday, October 23, 2013, 16:01
Solution ID: 00000256
I saw a new feature in my PerfectMail filter settings called "RX Scanner"; what is this feature and what can it do to help me?
The RX Scanner is a complex sender+content content validation engine targeting phishing and other spam.
This new analysis engine takes content filtering to the next level. It looks for pre-defined signatures in both the message and headers using a powerful matching engine. Using defined templates RX Scanner is able to identify what type of message is being being presented to the recipient. When a phishing target is identified, RX Scanner performs validation and verification of the message against well-known and published validation information available from the actual phishing target.
RX Scanner is an effective defense against well-known phishing attacks. Unlike spam campaigns where the content of e-mail can be varied infinitely to defeat anti-spam solutions, phishing attacks depend on a limited number of well defined target sites (e.g. Facebook). For a phishing campaign to be effective the phishing messages must resemble something the target site might send. Once a targeted phishing site is identified RX Scanner then performs a number of verification functions to confirm whether or not the message is legitimate.
As a bonus, this technique can also be use to block those well known spam campaigns that never seem to go away.
Tags: perfectmail, antispam, scanner, regexp, content, sender, validation, phishing, web-link
Link to this article: kb/rxscanner_rxscan_content_filter
Updated: Wednesday, October 23, 2013, 16:01
-- David Rutherford