cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
445
Views
0
Helpful
1
Replies

Filter emails from gmail to undisclosed-recipients on ESA

SphereNY
Level 1
Level 1

I am seeing a lot of spam emails coming from gmail to my users. We cannot block gmail as there are legitimate use cases. Anyone know how to filter these type of emails where my users email are in the BCC field?

From: BADGUY <BADGUY@gmail.com>
To: undisclosed-recipients:;
BCC: <USER@MYCOMPANY.COM>

1 Reply 1

UdupiKrishna
Cisco Employee
Cisco Employee

There's always a challenge with BCC when it comes to email processing. When u open the email in a text editor you will notice that BCC is not a separate header and in fact the recipients just show up in the "To" header field. Its the email client that is able to differentiate BCC.

If there's a different pattern to these emails, like envelope sender, body contents etc, it can be employed effectively to block these emails.