Forum Discussion
Submit PHISHING & SPAM samples to Microsoft
We receive several phish and spam messages everyday and we used to submit to Microsoft using the submission portal. we recently developed an automated process where when user reports this messages as...
Look at the confidence of the sightings being sent to you. Are the senders sure the mails are spams or phish, or are they asking you for an opinion?
If they are asking for an opinion then yes, you have to process the sighting and respond or react.
If they are confident the mail is unwanted, they should be saving you the time by reporting the sighting themselves. For Exchange Online you want to deploy the Report Message add-in (and there is talk that it is about to be folded into the main Outlook program). For on-premises Exchange, I believe they have to send direct but there are still established ways to ensure your SecOps team get a copy of whatever is being reported.
If they are asking for an opinion then yes, you have to process the sighting and respond or react.
If they are confident the mail is unwanted, they should be saving you the time by reporting the sighting themselves. For Exchange Online you want to deploy the Report Message add-in (and there is talk that it is about to be folded into the main Outlook program). For on-premises Exchange, I believe they have to send direct but there are still established ways to ensure your SecOps team get a copy of whatever is being reported.
- Thanks for the help ExMSW4319.
Our InfoSec team does not allow Outlook add-in so we use 3rd party add-in and when user submit the message using 3rd party, the messages delivered to a shared mailbox as an attachment. We have designed a automated process using mail rule and Power automate that extract the spam or phish emails as an attachment sent by user to shared mailbox and delivered to another mailbox which is managed by messaging. from the another shared mailbox, we send the email as an attachment to MS at Email address removed and MS confirmed that this is valid process and they accept the messages and those emails should appear in user reported email view in submission portal but as of now we are unable to see any messages.
