How do I submit a spam sample?

Transcription

1 How do I submit a spam sample? Note- before submitting a spam sample, you must create a trouble ticket with MSS/GCSC support. An end-user has received a message which should have been blocked as spam, and you wish to export a copy of the message from the user's client to provide to support for analysis. Follow the instructions below specific to your client, such as: Outlook (various versions) Lotus Notes (various versions) Apple Mac Other mail user agents Problem: Some spam hit my inbox which I want to submit for analysis. Unfortunately the message was not quarantined or audited on the Proofpoint server. How can I submit it? Solution: While submissions from quarantine are most useful, we can accept samples which are saved using enduser applications when necessary. Use these instructions to save and submit a false to MSS/GCSC Support. Please note these instructions refer to the original spam message, so the instructions must be followed by the recipient of the original spam message. Forwarded copies are often unusable regardless of how they are saved. Microsoft Office Outlook 2016/2013/ Open Microsoft Office Outlook. 2. Select the message that you want to save. 3. Click the File tab. 4. Click Save As. 5. Browse to the file location where you want save the file. 6. For Field Name, enter a name for the file. 7. From the Save as Type dropdown, select Outlook Message Format (*.msg). The message is saved with an ".msg" file extension

2 Microsoft Office Outlook Open Microsoft Office Outlook Select the message that you want to save. 3. Click File. 4. Click Save As. If you have opened the message and it appears in its own window, click the Microsoft Office Button image, and then click Save As. 5. Browse to the file location where you want save the file. 6. For Field Name, enter a name for the file. 7. From the Save as Type dropdown, select Outlook Message Format (*.msg). Microsoft Office Outlook Open Microsoft Office Outlook In the pop-up window, select Outlook Message Format from the Save as type dropdown. The File name is provided by default. You can change this if desired. The message is saved with an ".msg" file extension Microsoft Office Outlook 2011 on MAC 1. Select the message you would like to save 2. Drag and drop the message to desktop. The message will now be present on your desktop in an EML format file. 3. Go to Final Steps below on how to submit to support Microsoft Office Outlook XP 1. Open Microsoft Office Outlook XP. 4. In the pop-up, from Save as type dropdown, select Message Format (*.msg).

3 The File name is provided by default. You may change this if you want. The message is saved with an.msg file extension. Microsoft Outlook Express 1. Open Microsoft Outlook Express. 4. In the pop-up, from Save as type dropdown, select Mail (*.eml). The File name is provided by default. You may change this if you want. The message is saved with an.msg file extension. Lotus Notes and above 1. From the Lotus Notes mail database window, select the message you want to submit. 2. Open the message full view (not preview mode) In the pop-up, enter a filename. 5. Choose a location to save the file. 6. From the Save as Type dropdown, select Lotus Notes Mail Message (*.eml). 7. Enter a filename. Lotus Notes 5.x and below 1. From the Lotus Notes mail database window, select the message you want to submit 2. From File, select Export. 3. In the pop-up window, enter a filename. 4. Choose a location to save the file. 5. From the Save as type dropdown, select Structured Text. 6. After entering the filename, click Export. 7. In the Structured Text Export dialog box, select Selected documents from How Much to Export.

4 8. Click OK. 9. Save the text file in the location you designated in Step Go to Final Steps below on how to submit to support Lotus Notes 6.x 1. From the Lotus Notes mail database window, select the message you want to submit 2. Open the message full view (not preview mode). 3. From View menu, select Show, then Page Source. 4. From the File menu, select Export. 5. In the pop-up window, enter a filename and choose a location to save the file. 6. From the Save as type dropdown, select ASCII Text. 7. Enter the filename. 8. Press Export. 9. In the next dialog box, select Default Character Set. 10. Click OK. 11. Go to Final Steps below on how to submit to support Apple (Mac) Mail 1. Select the message you want to save. 2. From the File menu, select Save as In the popup window, select the format Raw Message Source. 4. Save with a filename including a.txt or.eml extension. 5. Go to Final Steps below on how to submit to support Other Mail User Agents 1. Save the that you want to report as a text file. 2. Make sure that the message is as close to its original form as possible. Your mail client might allow you to save rendered text as well as the original source -- it is the original raw source that is needed. 3. Make sure the original headers are intact and included in RFC-822 format. Typical file name extensions are.eml and.txt 4. Go to Final Steps below on how to submit to support Final Steps After you have obtained the sample message, follow these steps before submitting to support. 1. Open MS Word.

5 2. Create a new blank document. 3. Drag the saved message from one the samples above and drop it into the MS Word Document. 4. the attach document to att_seg@list.att.com. The subject line should read as follows: Subject: Spam Submission AOTS # Note substitute the number above with the number provided to you by MSS/GCSC Support.