how to prevent mass-phishing / monitor suspicious logins

[Driesp]

Hi all

We notice more and more targetted phishing towards all customers on our DirectAdmin network.
We are not using external spamfilter mechanisms.

I was wondering how you guys are securing your network?
For example is there a way to recall targetted phishing attacks?

I would also like to implement a way to observe suspicious logins on (imap / pop3 / smtp) accounts.
So we can proactively react on (password)leaks.
Do you guys use a framework or a ready to use script to monitor this?

Kind regards
Dries

 

[Driesp]

Hi all

I've wrote a script to recall (mass phishing) e-mails based on a subject and another identifier in that particular message.
It can recall all messages at once on that particular server.

I will try to find a solution or write a script to monitor suspicious, successful logins on our network.

Kind regards
Dries