Spam Campaign Abusing Atlassian Jira

Ethan Andrews@eandrews

•updated Feb 18, 2026•4•0•58

This rule detects emails originating from Atlassian Jira (specifically the .atlassian.net domain) that contain subject lines associated with a known spam campaign. The campaign uses various lures, including investment scams and online casinos, across multiple languages.