郵件黑名單建議

 郵件黑名單建議

*.ru

*.fi

*.au

*.de

*.live

*.nl

*.ch

*.vi

*.br

*.cy

*.es

*.np

*.jp

*.vn

*.af

*.mx

*.id

*.co

*.pk

*.za

*.qa

*.in

Emotet 社交工程郵件，寄件者或是內容中包含貴公司的員工資料或是簽名檔

 Emotet 社交工程郵件，寄件者或是內容中包含貴公司的員工資料或是簽名檔

參考文件

目前應該阻擋的 IP

https://www.trendmicro.com/en_us/research/22/a/emotet-spam-abuses-unconventional-ip-address-formats-spread-malware.html

https://www.mcafee.com/blogs/other-blogs/mcafee-labs/emotets-uncommon-approach-of-masking-ip-addresses/

193.42.36.245 (法國)

46.105.81.76 (波蘭)

185.7.214.7 (香港)

如果要做預先阻擋可以參考

https://feodotracker.abuse.ch/blocklist/#ip-blocklist

https://feodotracker.abuse.ch/downloads/ipblocklist_recommended.txt