This article describes how to email spam, and false-positive spam samples to SophosLabs.
It is preferred that you send samples as RFC-2822 attachments. Submitting in any other format can cause the loss of key message content, which may prevent SophosLabs from effectively analyzing the samples.
Email spam samples to :
Email false-positive spam samples to :
Send the email to Sophos at the address you selected above, with the subject line of your choice.
What To Do
From Microsoft Outlook
- Create a new email message.
-
Address it to :
or :
- From your Inbox, select the spam email that you received (you must select the email, not the content).
- Drag and drop the selected item(s) into the new email.
- This will now be displayed as an empty email with the suspect email as an attachment.
- Send the email to Sophos at the address you selected above, with the subject line of your choice.
From Mozilla Thunderbird
- Select the sample.
- From the toolbar choose Message > Forward > Attachment.
-
Address it to :
or :
- Send the email to Sophos at the address you selected above, with the subject line of your choice.
From Lotus Notes
Sophos cannot recommend a default method for attaching RFC-2822 messages, but the following options are available:
- Send the message direct to your Sophos Technical Support contact:
- Create a new email message addressed to your support contact.
- Open the spam message, select View > Show > Page Source.
- Copy and paste the Page Source content into the new email.
- Use the free third party enhancement software, 'Open-NTF'. This adds a menu option, 'Forward MIME to RFC-2822', to the Tools button. Use this to forward the email.
From other email clients
With other email client use the option 'Forward As Attachment'. You should discuss this with Sophos Technical Support before sending in a sample in this way.
Further information
If you believe that an item should be detected, raise the matter with Sophos Technical Support.
If you wish to submit spam samples to Support, attach the entire message source.
Related Articles
For information regarding the submission of files that you believe may have malicious content, refer to the Knowledgebase article 11490: Submitting samples of suspicious files to Sophos.
For information about submitting spam messages to Sophos using the optional Outlook Add-in, refer to the Knowledgebase article 118024:How to submit spam messages to Sophos with the Outlook Add-in.
