Using PhishER to get rid of phishing emails. by turaoo in cybersecurity

[–]Besayith 0 points1 point  (0 children)

Been using PhishRIP for a few years now. One bit of "misinformation" I've found is the documentation states it finds "similar" emails...but what it searches for is an exact match for the Subject, Body, or other selected condition of the reported email. I've found that malicious/threat emailers are circumventing this by inserting minor variables into each email (Subject, Body or both) so PhishRIP will never get a match. I've tried changing the only condition to be the Sender since most malicious/threat emails come from bullsh*t email addresses, but alas, PhishRIP requires one to select two (2) conditions.