How to report phishing attacks using Confluence?

[Chris Brownrigg]

Atlassian provides no way to report abuse directly on a Confluence page. How do I go about reporting a page being used in an active phishing attack?

This is the page I would like to report: https://pdffilelogin.atlassian.net/wiki/spaces/SF/overview. Please be aware that the page is active and will redirect you to a malicious site if you click on the redirect embedded in it.

I debated not including the link, but since Atlassian is forcing me to create a support account, verify my email, and make a post to a forum just for something as simple as a take-down request, I figure I would include it.

FYI, every single IT Security professional on the planet would like to request that a simple abuse reporting button be added to all Confluence pages ASAP. Thank you.

[Andy Heinzer · Accepted solution]

Hi @Chris Brownrigg 

Sorry for the inconvenience here.  Thanks for taking the time to report this site to us.  I have engaged with my anti-abuse team internally here at Atlassian and they have reported that this site has since been taken down.

For the time being, you are also able to send an email directly to abuse@atlassian.com in order to notify our anti-abuse team of any site that is violating our terms of service. Thanks again for letting us know.

Andy

[Chris Brownrigg]

Andy,

Thank you for the response and the take-down. You might want to consider adding the above address to a FAQ or somewhere on your "contact us" page. Reporting sites like this is time sensitive as the longer it stays active, the more potential victims there are. Having to hunt for this information wastes that valuable time and I know the security community at large would appreciate it.

Thanks again!

[habib rahman]

HI @Andy Heinzer Where can I report inappropriate content and images someone sent me via this email Atlassian Community <community-do-not-reply@em.atlassian.com>! Urgent! 

Thanks 

[Andy Heinzer]

If you received something from that address it tends to be because you are subscribed to a post or a collection within our community site.  When you subscribe to an entire collection, like this Confluence one, any user that posts something new to the collection would trigger an email sent to you.

Atlassian does moderator the Community and in turn we will work to remove spam and content that violates our guidelines.  That said, we do not get to see the content of messages being sent out at the time of their submission from every user.  If you click the link within the body of the email that contains the posts title, it should direct you here to community.atlassian.com and to the page in question.  If that page is still up, please let us know the URL so we can review it.

Alternatively, you can also click the ... menu and choose Report to moderators, in order to flag the material to a community mod.

[NO]

I wanted to report this post as a phishing attempt: https://dirt90jf-6c81-14b7-kb80-358b4kb95297.atlassian.net/wiki/spaces/~758815347/pages/66483/The+credit+line+application+has+been+processed+in+full.

There is no clear way to report instances like this.

[Nic Brough -Adaptavist-]

Andy's answer covers it, and Atlassian have a task to get it added to their docs.

[Andy Heinzer]

Thanks for reporting this. I have created a ticket with our abuse team about this site.  In the future if you find pages such as this one, you can also directly email abuse@atlassian.com with details of it and our team will investigate it further.

Andy

[Brant Schroeder]

@Chris Brownrigg Welcome to the Atlassian Marketplace

You would have to report abuse to Atlassian support here: https://support.atlassian.com/contact/

I would also suggest putting in a feature request for the abuse reporting at the page level here: https://jira.atlassian.com/secure/Dashboard.jspa