Cybersecurity
Having an issue with phishing that I'm scratching my head over. One of my clients is currently maintaining two domains in the following format: example.org and example-two.org. The latter is their old domain, and they're mainly maintaining it to avoid inconveniencing older clients who don't want to change their address books.
However, they've recently been receiving phishing emails that appear to be coming from their old domain. For example, jsmith@example.org keeps getting sent phishing emails from jsmith@example-two.org. I've tried to block inbound emails from that domain in Proofpoint, but it won't let me because the domain is in the Proofpoint portal. Likewise, I tried to implement a filter in the O365 portal to automatically quarantine emails from that domain, but it says that example-two.org isn't a valid address because of the hyphen, preventing me from implementing the filter.
I'm sure there's a simple solution to this, but I'm a fucking retard. Any ideas?
However, they've recently been receiving phishing emails that appear to be coming from their old domain. For example, jsmith@example.org keeps getting sent phishing emails from jsmith@example-two.org. I've tried to block inbound emails from that domain in Proofpoint, but it won't let me because the domain is in the Proofpoint portal. Likewise, I tried to implement a filter in the O365 portal to automatically quarantine emails from that domain, but it says that example-two.org isn't a valid address because of the hyphen, preventing me from implementing the filter.
I'm sure there's a simple solution to this, but I'm a fucking retard. Any ideas?
