Harassment Emails ?



  • How do you combat harassment emails coming from fake gmail accounts that could be [email protected]
    to your employees and the one sending them knows personal detail of users and acts stalker-ish.

    Aside from telling the user to disregard.

    Can you go to the police cyber criminal unit and what do you expect



  • @emad-r said in Harassment Emails ?:

    How do you combat harassment emails coming from fake gmail accounts that could be [email protected]
    to your employees and the one sending them knows personal detail of users and acts stalker-ish.

    Aside from telling the user to disregard.

    Can you go to the police cyber criminal unit and what do you expect

    How do you know it is a fake Gmail account?

    You report it and that is about it. To the police and google.



  • Can you not just block the address(es)?



  • @jimmy9008 said in Harassment Emails ?:

    Can you not just block the address?

    You realize, that is not how anything works when it comes to spam right?



  • @jaredbusch said in Harassment Emails ?:

    @jimmy9008 said in Harassment Emails ?:

    Can you not just block the address?

    You realize, that is not how anything works when it comes to spam right?

    Seems to work for us. If we add the email to the block list, no more email from that address. If we add the domain to the block list, no more email from that domain. With the spam filter on high this seems to work fine for us...



  • @jimmy9008 said in Harassment Emails ?:

    @jaredbusch said in Harassment Emails ?:

    @jimmy9008 said in Harassment Emails ?:

    Can you not just block the address?

    You realize, that is not how anything works when it comes to spam right?

    Seems to work for us. If we add the email to the block list, no more email from that address. If we add the domain to the block list, no more email from that domain. With the spam filter on high this seems to work fine for us...

    This is funny.



  • @jaredbusch I dont get your derision? Are you saying adding an email address to a block list doesnt work? Youre wrong.



  • @jimmy9008 said in Harassment Emails ?:

    @jaredbusch said in Harassment Emails ?:

    @jimmy9008 said in Harassment Emails ?:

    Can you not just block the address?

    You realize, that is not how anything works when it comes to spam right?

    Seems to work for us. If we add the email to the block list, no more email from that address. If we add the domain to the block list, no more email from that domain. With the spam filter on high this seems to work fine for us...

    so,.. SPAM email come from @Gmail.com - you block Gmail.. you realize you just blocked millions of valid addresses which may have need to contact you / your company.

    0_1531760272335_5bda93f5-9634-4821-8c8c-c5e054aeeff6-image.png



  • @jimmy9008 said in Harassment Emails ?:

    Can you not just block the address(es)?

    Hey

    He/She keeps creating other gmail addresses fake ones I do block that one from the recipient but he will just keep doing another one and it is not an SPAM it is grudge, this person knows the email of the companies and state personal details that a person from outside the company wont know like Engagement/wedding ..etc then spreads bad worth of mouth of the uuser, he is targeting our female staff.

    What Can I do, I tried replying with a link that once opened I will get an IP, but nothing. the link was not clicked.



  • @jaredbusch said in Harassment Emails ?:

    @emad-r said in Harassment Emails ?:

    How do you combat harassment emails coming from fake gmail accounts that could be [email protected]
    to your employees and the one sending them knows personal detail of users and acts stalker-ish.

    Aside from telling the user to disregard.

    Can you go to the police cyber criminal unit and what do you expect

    How do you know it is a fake Gmail account?

    You report it and that is about it. To the police and google.

    Can the police really do anything ?

    And i know cause the naming of gmail accounts is like [email protected] and I google that and no history of any activity then he does the same a month later, I am keeping records of the incidents.



  • @emad-r said in Harassment Emails ?:

    @jimmy9008 said in Harassment Emails ?:

    Can you not just block the address(es)?

    Hey

    He/She keeps creating other gmail addresses fake ones I do block that one from the recipient but he will just keep doing another one and it is not an SPAM it is grudge, this person knows the email of the companies and state personal details that a person from outside the company wont know like Engagement/wedding ..etc then spreads bad worth of mouth of the uuser, he is targeting our female staff.

    Social engineering. 100% certain this information is easily obtianable.

    But still even if it is a grudge, playing whack-a-mole with individual email address blocking is a waste of everyone's time. You report it and you move on.



  • @gjacobse said in Harassment Emails ?:

    @jimmy9008 said in Harassment Emails ?:

    @jaredbusch said in Harassment Emails ?:

    @jimmy9008 said in Harassment Emails ?:

    Can you not just block the address?

    You realize, that is not how anything works when it comes to spam right?

    Seems to work for us. If we add the email to the block list, no more email from that address. If we add the domain to the block list, no more email from that domain. With the spam filter on high this seems to work fine for us...

    so,.. SPAM email come from @Gmail.com - you block Gmail.. you realize you just blocked millions of valid addresses which may have need to contact you / your company.

    0_1531760272335_5bda93f5-9634-4821-8c8c-c5e054aeeff6-image.png

    If you read what I wrote properly you'll see I have not said to block @gmail.com.

    I said to block the addresses the person is using. The quote above was 'in general' where, if you will never require email from a nuisance domain, blocking the domain will work. I was saying to block the [email protected] address, which would not block millions on Gmail, but would actually block that one nuisance address. If you read what was written and understood it meant to block the gmail.com domain, please take more time processing words!

    Yes, they could create another, but at least this one would be blocked. I was trying to give suggestions, rather than useless "I'm a douche and think I know more than you" remarks.



  • @momurda said in Harassment Emails ?:

    @jaredbusch I dont get your derision? Are you saying adding an email address to a block list doesnt work? Youre wrong.

    No. He has an awful personality from what I've seen on this forum, and thinks childish comments without any actual insight or value mean a damn. He does this thing all the time.



  • Aside from contacting the police and trying to get rid of the source would be to see if any of the users can move to a whitelist approach. If they're not in externally facing positions can you restrict which domains can send to them?



  • @momurda said in Harassment Emails ?:

    @jaredbusch I dont get your derision? Are you saying adding an email address to a block list doesnt work? Youre wrong.

    I never said it could not work. But the cost to do something like this is nothing but a waste of money. This is nothing but basic logic.

    There is no point in playing whack-a-mole with a malicious sender. You block, they make a new one. Rinse and repeat. This is is doing nothing but costing your company money.

    Your user has 100% of the tools they need to block any email within their email client. Train them to right click and junk/block and move on.

    If you want to do something legally, then you contact HR and have them contact the police per what ever company policy you have about harassment. If the user wants to press formal charges, the police have every tool they need to subpoena Google for information on the account. Additionally Google will 100% support this process.

    @Jimmy9008 Is this better? I spelled out the basics that any IT professional should already know.



  • @jaredbusch said in Harassment Emails ?:

    @momurda said in Harassment Emails ?:

    @jaredbusch I dont get your derision? Are you saying adding an email address to a block list doesnt work? Youre wrong.

    I never said it could not work. But the cost to do something like this is nothing but a waste of money. This is nothing but basic logic.

    There is no point in playing whack-a-mole with a malicious sender. You block, they make a new one. Rinse and repeat. This is is doing nothing but costing your company money.

    Your user has 100% of the tools they need to block any email within their email client. Train them to right click and junk/block and move on.

    If you want to do something legally, then you contact HR and have them contact the police per what ever company policy you have about harassment. If the user wants to press formal charges, the police have every tool they need to subpoena Google for information on the account. Additionally Google will 100% support this process.

    @Jimmy9008 Is this better? I spelled out the basics that any IT professional should already know.

    Actually, yes. This is a far better response. It has purpose, and actually explains what you mean, rather than pointless comments acting superior. Keep it up, growth is a good thing.

    I still disagree with you though, as an admin blocking an address is still useful, just not your preferred 'less costly' approach. Every once in a while a user's has to check junk and spam, and when they do they will feel upset as they see messages from the person doing the attack, that's not good. When blacklisted the client won't even get the message to junk at all, and the user never has to go through that potentially upsetting process as it would not have been delivered.



  • @jimmy9008 said in Harassment Emails ?:

    @jaredbusch said in Harassment Emails ?:

    @momurda said in Harassment Emails ?:

    @jaredbusch I dont get your derision? Are you saying adding an email address to a block list doesnt work? Youre wrong.

    I never said it could not work. But the cost to do something like this is nothing but a waste of money. This is nothing but basic logic.

    There is no point in playing whack-a-mole with a malicious sender. You block, they make a new one. Rinse and repeat. This is is doing nothing but costing your company money.

    Your user has 100% of the tools they need to block any email within their email client. Train them to right click and junk/block and move on.

    If you want to do something legally, then you contact HR and have them contact the police per what ever company policy you have about harassment. If the user wants to press formal charges, the police have every tool they need to subpoena Google for information on the account. Additionally Google will 100% support this process.

    @Jimmy9008 Is this better? I spelled out the basics that any IT professional should already know.

    Actually, yes. This is a far better response. It has purpose, and actually explains what you mean, rather than pointless comments acting superior. Keep it up, growth is a good thing.

    I still disagree with you though, as an admin blocking an address is still useful, just not your preferred 'less costly' approach. Every once in a while a user's has to check junk and spam, and when they do they will feel upset as they see messages from the person doing the attack, that's not good. When blacklisted the client won't even get the message to junk at all, and the user never has to go through that potentially upsetting process as it would not have been delivered.

    Again, that is not how it works when you block a user. Here is O365 web interface.
    0_1531763579616_c04f9fed-6d1a-443a-a2e3-a6e6423b8b3d-image.png
    0_1531763591135_4e859503-9d72-465b-bf22-948bedbcd4ad-image.png



  • @jaredbusch said in Harassment Emails ?:

    @jimmy9008 said in Harassment Emails ?:

    @jaredbusch said in Harassment Emails ?:

    @momurda said in Harassment Emails ?:

    @jaredbusch I dont get your derision? Are you saying adding an email address to a block list doesnt work? Youre wrong.

    I never said it could not work. But the cost to do something like this is nothing but a waste of money. This is nothing but basic logic.

    There is no point in playing whack-a-mole with a malicious sender. You block, they make a new one. Rinse and repeat. This is is doing nothing but costing your company money.

    Your user has 100% of the tools they need to block any email within their email client. Train them to right click and junk/block and move on.

    If you want to do something legally, then you contact HR and have them contact the police per what ever company policy you have about harassment. If the user wants to press formal charges, the police have every tool they need to subpoena Google for information on the account. Additionally Google will 100% support this process.

    @Jimmy9008 Is this better? I spelled out the basics that any IT professional should already know.

    Actually, yes. This is a far better response. It has purpose, and actually explains what you mean, rather than pointless comments acting superior. Keep it up, growth is a good thing.

    I still disagree with you though, as an admin blocking an address is still useful, just not your preferred 'less costly' approach. Every once in a while a user's has to check junk and spam, and when they do they will feel upset as they see messages from the person doing the attack, that's not good. When blacklisted the client won't even get the message to junk at all, and the user never has to go through that potentially upsetting process as it would not have been delivered.

    Again, that is not how it works when you block a user. Here is O365 web interface.
    0_1531763579616_c04f9fed-6d1a-443a-a2e3-a6e6423b8b3d-image.png
    0_1531763591135_4e859503-9d72-465b-bf22-948bedbcd4ad-image.png

    I have not used the web interface but would expect it to work like the client. In the client, a user blocking mail within their client, means that sender will go to junk. They will still see future messages when theh check junk.

    Blocking as an admin by blacklist will entirely stop the mail being delivered, even to junk.



  • What about changing the user's email address? Keep the other address active as a shared folder or something, so the sender doesn't receive NDRs and doesn't know that the email address has been changed.



  • @jaredbusch said in Harassment Emails ?:

    @momurda said in Harassment Emails ?:

    @jaredbusch I dont get your derision? Are you saying adding an email address to a block list doesnt work? Youre wrong.

    I never said it could not work. But the cost to do something like this is nothing but a waste of money. This is nothing but basic logic.

    There is no point in playing whack-a-mole with a malicious sender. You block, they make a new one. Rinse and repeat. This is is doing nothing but costing your company money.

    Your user has 100% of the tools they need to block any email within their email client. Train them to right click and junk/block and move on.

    If you want to do something legally, then you contact HR and have them contact the police per what ever company policy you have about harassment. If the user wants to press formal charges, the police have every tool they need to subpoena Google for information on the account. Additionally Google will 100% support this process.

    @Jimmy9008 Is this better? I spelled out the basics that any IT professional should already know.

    I liked the idea of training users and removing this from IT, as it will waste time and he will keep creating new email account.



  • @wrx7m said in Harassment Emails ?:

    What about changing the user's email address? Keep the other address active as a shared folder or something, so the sender doesn't receive NDRs and doesn't know that the email address has been changed.

    That wouldn't work as you'd be risking and spending money to create an additional account (even an alias) to protect the user.

    Train the user to junk/block the sender or use the tools that exist today to follow through as @JaredBusch has already said, by subpoenaing google & contacting the police.



  • @dustinb3403 - Alias emails and shared mailboxes are free on O365.



  • @wrx7m said in Harassment Emails ?:

    @dustinb3403 - Alias emails and shared mailboxes are free on O365.

    But it wouldn't correct the issue and only complicate the business functions. The goal here is to not spend a lot of business time/money on something that there are appropriate tools to fixing.



  • @dustinb3403 - I thought the goal was to prevent the user from receiving the messages.



  • @wrx7m said in Harassment Emails ?:

    @dustinb3403 - I thought the goal was to prevent the user from receiving the messages.

    Reposting this as it's still true.
    CDqD1KV.jpg

    The goal is not to stop the employee from receiving emails, the goal is to stop the spammer. How would you stop a spammer who creates a new email account every 5 emails or whatever schedule?

    You'd use the tools available, Junk/Spam filters at the user level next would be google/police if that is where the spam is originating.



  • Sure the admin could go and blacklist the sender or domain, but that's an unrealistic approach to this. If the spammer was spamming the entire organization from private domain than certainly investigate the option.

    But blocking [email protected] would be insane.



  • @dustinb3403 said in Harassment Emails ?:

    Sure the admin could go and blacklist the sender or domain, but that's an unrealistic approach to this. If the spammer was spamming the entire organization from private domain than certainly investigate the option.

    But blocking [email protected] would be insane.

    Nobody said block @gmail.com.



  • @jimmy9008 said in Harassment Emails ?:

    @dustinb3403 said in Harassment Emails ?:

    Sure the admin could go and blacklist the sender or domain, but that's an unrealistic approach to this. If the spammer was spamming the entire organization from private domain than certainly investigate the option.

    But blocking [email protected] would be insane.

    Nobody said block @gmail.com.

    OK. . . to the same effect having the admin block an individual address at any domain is pointless if the individual who is sending the spam emails knows their target's email address as they would simply create a new email to continue spamming with.

    This is a matter for practical solutions or law enforcement. Plain and simple.



  • Obviously, you get law enforcement involved if it is a targeted harassment case. I still think changing the user's address and keeping the other active (on a shared mailbox that the user wouldn't need access to) would be worth the 2 minutes to see if the messages continue to go to the old one.



  • @wrx7m said in Harassment Emails ?:

    Obviously, you get law enforcement involved if it is a targeted harassment case. I still think changing the user's address and keeping the other active (on a shared mailbox that the user wouldn't need access to) would be worth the 2 minutes to see if the messages continue to go to the old one.

    2 minutes? When a user gets a new email accoutn? Are you insane?