How to bypass your protections by using Arsen's domain names whitelisting on Google Workspace/ Google Apps?

This procedure allows you to authorize our phishing simulations and remove the alert banner that warns of potential spam on the email addresses of your colleagues on Google Workspace/Google Apps.

This method is recommended if you have a filtering solution upstream of your receiving servers, and will allow you to avoid displaying alert banners that may come from the sending emails or Arsen domains that you will insert into a list.

Summary

• Step 1: Edit the settings of the rules that concern spam, phishing, or malware
• Step 2: Create the list of emails or domains that you want to whitelist
• Step 3: Apply the rules

Step 1: Edit the settings of the rules that concern spam, phishing, or malware

1. Start by logging into your Google Workspace/Google Apps Admin console.

2. Navigate to the Applications section by clicking on Applications.

3. Click on Overview.

4. Enter your Google Workspace.

5. Click on the Spam, Phishing, Malware section as follows:

Step 2: Create the list of emails or domains that you want to whitelist

This involves whitelisting the Arsen attack domains or complete sending emails that you will choose in each of your scenarios.

1. Start by naming the rule you are going to configure. Arsen custom rules

Check the following options :

• Bypass spam filters for internal senders
• Bypass spam filters for messages from senders or domains in selected lists
• Bypass spam filters and hide warnings for messages from senders or domains in selected lists

2. Click on Create or Edit a list.

Add the email addresses or sending domain names of your phishing campaigns from Arsen.

3. Click on Add.

4. Edit the list and give it a name. Arsen domain or Arsen sender's list.

5. Once the list is created, click on Save list.

Step 3: Apply the rules

After saving your list, select it and add it to the following two rules:

• Bypass spam filters for messages from senders or domains in selected lists
• Bypass spam filters and hide warnings for messages from senders or domains in selected lists

Then click on Save.

You will see the list being applied from the Gmail settings management panel.

Updated on: 23/10/2023