Forum Discussion
Quarantine "finger print matching" false positive
I just started dealing with this 3 days ago. Emails being sent out of an internal system, to our internal users, are all getting quarantined for this reason...tagged as high confidence phishing. I have been going back and forth with MS support for days now (as usual), trying to get this fixed and to get an explanation as to why it just started happening a few days ago. I finally received a response from their support (below)...they advised this was fixed, but I am still seeing emails being quarantined:
"I have just been informed by our team earlier this morning that they have investigated the submissions reported and verified that the shared samples were incorrectly classified as phishing (or spam/malware) by the one of our detections. Frequent adjustments to the features and scores assigned by our model to address new campaigns can sometimes result in the misclassification of Customer emails as suspicious, and we truly apologize for this inconvenience.
The issue was mitigated by identifying and marking entities related as clean, which will prevent this and other model from detecting them or learning them as bad. "
At this point, all I can is to continue to check the quarantine, submit to MS for review, release emails, then email Support back with the submission info. I have no confidence at all that this going to be resolved.