[ms office - o365] Spam Emails

[pbad]

We have some students who are receiving spam emails that are being sent from other student accounts. Does this mean that the students account has been hacked or spammers are sending emails with the email address of these students? If anyone can clarify this for me then that would be great.

[Slum90]

The email is being spoofed. You can do the following to fix/prevent this:

- change password

- run anti-malware/virus scan

- use 2fa

- Add your school's public IP to the spf record

- add DKIM record

[cw222]

You can also add a mail flow rule in your exchange admin. You may get some false positives however its a quick easy solution to some of these messages.

 

sender's address domain portion belongs to any of these domains: 'YOUR DOMAIN'

and Is received from 'Outside the organization'

 

DO the following...

Deliver the message to the hosted quarantine

 

There's a great thread over at http://www.edugeek.net/forums/security/177589-phishing-spam-emails.html with a large amount of tips /Regex etc