Understanding and identifying malicious emails can be a difficult task. After all, attackers are actively trying to deceive you, and they’re getting better all the time. Be it social engineering or malicious attachments, threat actor’s techniques are always evolving.
The Suspicious Email Analysis Service, or SEAS, is a service provided by Field Effect that allows users to submit emails they find suspicious. Submitted emails are analyzed by Field Effect analysts to check for:
Malicious intent on behalf of the sender.
Anomalous activity happening on the recipient’s account.
This is not traditional spam filtering and analysis. The same expert Field Effect technology and analysts that identify threats on your network power the SEAS service. This is a sophisticated inspection that considers the context of your business. While we look for technical threats, we also inspect for “social engineering” and other threats that may evade mail filtering services.
Note: Please ensure the monitoring profile is up to date with the appropriate email domains for the organization. SEAS will use these domains to organize and associate SEAS submissions with the correct organization.
When Should an Email be Submitted?
Any email that a user finds suspicious may be worth an examination. Prime examples would be:
Emails claiming to be from an employee (email spoofing), but from an alternative email address.
Emails claiming to be from a well-known company asking you to move money, click a link, or take a survey, but they are from a malicious source.