Sublime Security medium experimental mql

Service abuse: GetAccept callback scam content

Detects callback scam language in messages sent through legitimate GetAccept infrastructure, indicating potential abuse of the service for fraudulent solicitation.

View Source

Detection Logic

type.inbound
// Legitimate GetAccept sending infrastructure
and sender.email.domain.root_domain == 'getaccept.com'
and any(ml.nlu_classifier(body.current_thread.text).intents,
        .name == "callback_scam"
)

Field Validations

Loading…

Comments (0)

Loading comments...