Abstract: A method and system for simulating end user responses to spam email messages are described. In one embodiment, the method includes receiving a probe email message indicative of spam and identifying a seeding component in the probe email message. The method further includes activating the seeding component utilizing a selected email address. The selected email address may then appear to the originator of the probe email message as an active email account.

Abstract: A malicious e-mail manager provides protection from malicious e-mail attacks. A malicious e-mail manager examines an e-mail stream, and identifies suspicious e-mail messages therein. The malicious e-mail manager inverts responses to addresses from which identified suspicious e-mail originated. Where the target address of a suspicious e-mail message points to an existing recipient, the malicious e-mail manager returns an error code to the originating address indicating that the recipient does not exist. On the other hand, where the target address of a suspicious e-mail message points to a non-existent recipient, the malicious email manager returns a success code to the originating address, indicating that the e-mail message was delivered. Thus, senders of malicious e-mail believe that existing users are non-existent and vice versa. E-mail from legitimate senders is handled normally.