Forum Discussion

jlouden's avatar
jlouden
Brass Contributor
Aug 27, 2019

Safe Links not rewriting

Hi All,   I've just received a pretty basic phishing email using a MS Form to harvest  username and passwords. we do have Office ATP enabled, but noticed that the link wasn't rewritten..and futher ...
security
VasilMichev's avatar
VasilMichev
MVP
Aug 27, 2019

Do you mean the link to the actual form? It should be rewritten regardless of any content in the actual form. Depending on the version of Outlook, you might be seeing the new "native" rendering of links, which shows the original URL in the tooltip, but if you check the status bar or click on the link it should take you to the rewritten one. If that's not the case, check for any exceptions you might have for rewriting URLs.

 

If you mean content in the actual form, they just announced this: https://admin.microsoft.com/AdminPortal/home?switchtomodern=true#/MessageCenter?id=MC188695

jlouden's avatar
jlouden
Brass Contributor
Aug 28, 2019

Hi, Vasil,

 

I did click on the link and found that it went directly to the site without rewriting the url. The form was external to our Org so don't think that setting will help, but enable it as soon as it comes in.

  • VasilMichev's avatar
    VasilMichev
    MVP
    Aug 28, 2019

    I would suggest you open a support ticket and report this then, it should have been rewritten.