How to bypass your protections by using Arsen's domain names whitelisting on Google Workspace/ Google Apps?
This procedure allows you to authorize our phishing simulations and remove the alert banner that warns of potential spam on the email addresses of your colleagues on Google Workspace/Google Apps.
This method is recommended if you have a filtering solution upstream of your receiving servers, and will allow you to avoid displaying alert banners that may come from the sending emails or Arsen domains that you will insert into a list.
Step 1: Edit the settings of the rules that concern spam, phishing, or malware
Step 2: Create the list of emails or domains that you want to whitelist
Step 3: Apply the rules
Start by logging into your Google Workspace/Google Apps Admin console.
Navigate to the Applications section by clicking on Applications.
Click on Overview.
Enter your Google Workspace.
Click on the Spam, Phishing, Malware section as follows:
This involves whitelisting the Arsen attack domains or complete sending emails that you will choose in each of your scenarios.
If you choose this whitelisting method, we recommend that you contact us and we will provide you with the complete list of domain names available on the platform to create a comprehensive list, to avoid editing this list for each new campaign.
Start by naming the rule you are going to configure. Arsen custom rules
Check the following options :
Bypass spam filters for internal senders
Bypass spam filters for messages from senders or domains in selected lists
Bypass spam filters and hide warnings for messages from senders or domains in selected lists
Click on Create or Edit a list.
Add the email addresses or sending domain names of your phishing campaigns from Arsen.
Click on Add.
Edit the list and give it a name. Arsen domain or Arsen sender's list.
Once the list is created, click on Save list.
After saving your list, select it and add it to the following two rules:
Bypass spam filters for messages from senders or domains in selected lists
Bypass spam filters and hide warnings for messages from senders or domains in selected lists
Then click on Save.
You will see the list being applied from the Gmail settings management panel.
This method is recommended if you have a filtering solution upstream of your receiving servers, and will allow you to avoid displaying alert banners that may come from the sending emails or Arsen domains that you will insert into a list.
Summary
Step 1: Edit the settings of the rules that concern spam, phishing, or malware
Step 2: Create the list of emails or domains that you want to whitelist
Step 3: Apply the rules
Step 1: Edit the settings of the rules that concern spam, phishing, or malware
Start by logging into your Google Workspace/Google Apps Admin console.
Navigate to the Applications section by clicking on Applications.
Click on Overview.
Enter your Google Workspace.
Click on the Spam, Phishing, Malware section as follows:
Step 2: Create the list of emails or domains that you want to whitelist
This involves whitelisting the Arsen attack domains or complete sending emails that you will choose in each of your scenarios.
If you choose this whitelisting method, we recommend that you contact us and we will provide you with the complete list of domain names available on the platform to create a comprehensive list, to avoid editing this list for each new campaign.
Start by naming the rule you are going to configure. Arsen custom rules
Check the following options :
Bypass spam filters for internal senders
Bypass spam filters for messages from senders or domains in selected lists
Bypass spam filters and hide warnings for messages from senders or domains in selected lists
Click on Create or Edit a list.
Add the email addresses or sending domain names of your phishing campaigns from Arsen.
Click on Add.
Edit the list and give it a name. Arsen domain or Arsen sender's list.
Once the list is created, click on Save list.
Step 3: Apply the rules
After saving your list, select it and add it to the following two rules:
Bypass spam filters for messages from senders or domains in selected lists
Bypass spam filters and hide warnings for messages from senders or domains in selected lists
Then click on Save.
You will see the list being applied from the Gmail settings management panel.
Updated on: 23/10/2023
Thank you!