False Phishing Clicks Affecting Partners Using Barracuda Networks

Update timeline

1. identified Sep 13, 2024, 08:14 PM UTC

   We have been made aware that some partners using Barracuda Networks are experiencing false click reports on our phishing simulation emails. This issue stems from a recent update to Barracuda’s email protection feature, Impersonation Protection, which conducts post-delivery scans. Unfortunately, this scanning process is unintentionally triggering clicks on phishing simulation emails from our platform. We are actively working to resolve this issue as quickly as possible. We appreciate your patience and understanding as we work toward a solution.

2. monitoring Sep 17, 2024, 07:31 PM UTC

   We have developed a solution to address the false click reports caused by Barracuda's Impersonation Protection feature and are currently testing it in our environment. We will update you once this solution is deployed in production. Thank you for your continued patience as we finalize this resolution.

3. resolved Sep 25, 2024, 04:27 PM UTC

   The fix designed to address false click reports from Barracuda's Impersonation Protection feature was successfully deployed to our production environment. We have implemented a filtering mechanism that excludes the implicated IP addresses associated with Barracuda’s Impersonation Protection. Please note that there may still be instances of clicks that could be legitimate or false positives from other email filtering services. If you suspect that your users are experiencing false positives, please contact our support team for assistance. Thank you for your patience and understanding as we worked with Barracuda to resolve this issue.