This article has 225 words.
Setup spam filter
Experience shows that the best strategy for an effective phishing attack is to send a large number of messages in a short period of time. This prevents employees from telling one another: “listen, watch out for message X”. They will rely on themselves and their sense of cyber security. In addition, you have to keep in mind that the mail server may not be happy that for a whole week someone sent more than 5,000 emails from one domain with almost the same content.
Thus, there are two independent reasons to modify SPAM handling in such a way that koal campaigns are prioritized. The administrator, depending on which mail server he uses and how he builds the rules, has two options for solving this problem:
- adding IPs as trusted, whatever will not be sent from them (recommended)
- adding domains from which dispatch will be carried out
Adresy IP
Currently there are two IPv4 addresses:
- 54.240.89.196
- 54.240.89.197
See your mail server vendor for more instructions. To save time:
- If you are using Microsoft 365: https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/configure-the-connection-filter-policy?view=o365-worldwide
- If you are using GSuite: https://support.google.com/a/answer/60751?hl=en
Domains
We support the following domains:
- training.okkoala.com
- email-not-reply.com
- urzad.email-not-reply.com
- faktura.email-not-reply.com
- wakacje.email-not-reply.com
- bank.email-not-reply.com
- security.email-not-reply.com
- microsofl.email-not-reply.com
- microsoftcorp.net
- securitycheck-email.com
- metaverse-store-center.com
- parcel-delivery-system.com
- dhl.parcel-delivery-system.com
- impost.parcel-delivery-system.com
- platnosci.shopping-over-blockchain.com
See your mail server vendor for more instructions. To save time:
- If you are using Microsoft 365: https://learn.microsoft.com/en-us/exchange/troubleshoot/antispam-and-protection/cautions-against-bypassing-spam-filters
- If you are using GSuite: https://support.google.com/googlecloud/answer/10758246?hl=en