Suspicious subject | Detection.FYI

Mass campaign: recipient address in subject, body, and link (first-time sender)
Feb 21, 2023 · Credential phishing Machine Learning Natural Language Understanding Suspicious subject ·
Share on:
This detects a pattern commonly observed in mass phishing campaigns.
The local_part or the full email address of the recipient is used in the subject, body, and link query parameter to "personalize" the attack.

Read More
File sharing link with a suspicious subject
Dec 23, 2022 · File sharing link Suspicious link Suspicious subject ·
Share on:
A file sharing link in the body with a common BEC subject. This rule could be expanded to include additional BEC subjects.

Read More
Sharepoint online with external recipients and external display name
Oct 26, 2022 · Suspicious link Suspicious content Suspicious subject Suspicious sender ·
Share on:
An email from Sharepoint Online that was sent to multiple recipients that did not originate from a sender, by display name, in your organization.

Read More