KnowledgeBase Articles » What is the "RX Scanner"?

Wednesday, October 23, 2013, 16:01

What is the "RX Scanner"?

Category: Filtering

Solution ID: 00000256

Summary:

I saw a new feature in my PerfectMail filter settings called "RX Scanner"; what is this feature and what can it do to help me?

Answer:

The RX Scanner is a complex sender+content content validation engine targeting phishing and other spam.

This new analysis engine takes content filtering to the next level. It looks for pre-defined signatures in both the message and headers using a powerful matching engine. Using defined templates RX Scanner is able to identify what type of message is being being presented to the recipient. When a phishing target is identified, RX Scanner performs validation and verification of the message against well-known and published validation information available from the actual phishing target.

RX Scanner is an effective defense against well-known phishing attacks. Unlike spam campaigns where the content of e-mail can be varied infinitely to defeat anti-spam solutions, phishing attacks depend on a limited number of well defined target sites (e.g. Facebook). For a phishing campaign to be effective the phishing messages must resemble something the target site might send. Once a targeted phishing site is identified RX Scanner then performs a number of verification functions to confirm whether or not the message is legitimate.

As a bonus, this technique can also be use to block those well known spam campaigns that never seem to go away.

Tags: perfectmail, antispam, scanner, regexp, content, sender, validation, phishing, web-link

Link to this article: https://perfectmail.com/kb/rxscanner_rxscan_content_filter

Updated: Wednesday, October 23, 2013, 16:01

-- David Rutherford