Undected phish from senders with LONG addresses
I posted about this earlier, but something seems to have deleted my post. A certain kind of phish is currently coming in hot. Senders who have very long addresses, from my obervation > 300 characters are being overlooked and lots of dangerous phish is making its way into EXO mailboxes. Do this in Advanced Hunting to see if you are victim and please report the messages as phish so the "system" can learn about it. EmailEvents | extend sndrAddrLen = strlen(SenderFromAddress) | where sndrAddrLen >= 200 and (LatestDeliveryLocation in~ (@'Inbox/folder')) | project-reorder sndrAddrLen, Subject, SenderFromAddress, LatestDeliveryLocation, DeliveryLocation, RecipientEmailAddress
Incorrect training status in attack simulation training
I've run a few attack simulation automations, and every time we get some users who say they have completed the training, but the status doesn't indicate that, and they keep getting training notifications. Is there anyway to figure out what is going on with these users? I do believe that they are completing the training before contacting the help desk about repeat reminders.
Can I turn on MaiTips without breaking digitally signed mail?
Hello dear Community, I have one customer who has 3rd party E-Mail Digital Sign Service. Then the customer wants to turn on the MailTips. Microsoft does not have any official Info about It. Does anyone have experience maybe? I have found the following link on Reddit. https://www.reddit.com/r/exchangeserver/comments/jbxbe4/breaking_digitally_signed_smime_emails_with/ Regards
Attack Simulator - Randomize Send Times
Hi, I've read this article: https://techcommunity.microsoft.com/t5/security-compliance-and-identity/announcing-exciting-updates-to-attack-simulation-training/ba-p/2455961 I'm now preparing one simulation, and there's still one question which is not clear for me. I want to randomize the sending times, to avoid the "crowd" effect of everyone receiving at the same time. But if I define the start date as 1 of October for example and end date for 15 of October, how will the randomization of email sending happen? Usually I leave the campaigns on a 15 days timeframe, to give enough time to any user which is on vacation for a week for example. But if the randomization occurs between the start date and end date, that may mean that some users will receive the email near the last days? ThanksAttack Simulator: Company Logo not showing on landingspage
Hi All, I have the following issue: the uploaded company logo (PNG or JPEG) is not shown on the landings page once the user clicks on the phishing link. See the attached screenshot; the image source is empty. I tried this multiple times with different logos and landingpages, but the results are the same. During the upload of the logo, there is no confirmation that the logo has been uploaded successfully.... You only click next during the creation of the simulation..... When clicking on the preview-button (during simulation creation), the logo is shown.
