Mailuminati Guardian – Collaborative and scalable polymorphic phishing detection

Summary: Mailuminati Guardian detects polymorphic phishing by fingerprinting an email's structural DNA using TLSH fuzzy hashing, enabling identification despite minor content changes. It integrates as a sidecar API with existing spam filters and shares threat clusters without exposing raw emails.

What it does

Guardian generates stable fingerprints of emails based on their structure to detect phishing campaigns that evade signature-based filters by mutating content. It operates alongside tools like Rspamd, SpamAssassin, and Postfix, providing real-time threat sharing and learning through a feedback loop with Dovecot/Sieve.

Who it's for

It is designed for email administrators and security teams seeking to enhance phishing detection in existing spam filtering systems while preserving user privacy.

Why it matters

It addresses the challenge of polymorphic phishing attacks that bypass traditional filters by detecting structural similarities rather than relying on exact content matches.