Skip to content

Enhance USPS impersonation detection rule logic #3445

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 2 commits into from
Nov 5, 2025
Merged

Enhance USPS impersonation detection rule logic #3445

merged 2 commits into from
Nov 5, 2025

Conversation

@peterdj45
Copy link
Member

@peterdj45 peterdj45 commented Oct 30, 2025 •
edited
Loading

Description

adding sender display name check to account for impersonation samples without a USPS logo

Associated samples

  • platform.sublime.security/messages/4f930b6459440c5424da0f381247ef7f403396ee1c3b33a472455ea74637e123

Hunts

@peterdj45 peterdj45 requested a review from a team as a code owner October 30, 2025 08:13
@github-actions github-actions bot added the in-test-rules PR is in our testing suite to collect telemetry label Oct 30, 2025
github-actions bot added a commit that referenced this pull request Oct 30, 2025
@github-actions
[PR #3445] added rule: Brand impersonation: USPS
0117d9f
@peterdj45 peterdj45 added the review-needed Indicates that a PR is waiting for review label Nov 4, 2025
aidenmitchell
aidenmitchell requested changes Nov 4, 2025
View reviewed changes
@peterdj45 @aidenmitchell
Update impersonation_usps.yml
ccf3f5b 
Co-authored-by: Aiden Mitchell <me@aidenmitchell.ca>
@peterdj45 peterdj45 enabled auto-merge November 4, 2025 17:04
github-actions bot added a commit that referenced this pull request Nov 4, 2025
@github-actions
[PR #3445] modified rule: Brand impersonation: USPS
4b61278
@peterdj45 peterdj45 added this pull request to the merge queue Nov 5, 2025
Merged via the queue into main with commit 8dc7723 Nov 5, 2025
3 checks passed
@peterdj45 peterdj45 deleted the peter.fn.impersonation_usps branch November 5, 2025 17:43
github-actions bot added a commit that referenced this pull request Nov 5, 2025
@github-actions
[PR #3445] Delete detection rule
7d4d3c5
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@aidenmitchell aidenmitchell aidenmitchell approved these changes

Assignees

No one assigned

Labels

in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@peterdj45 @aidenmitchell