Phishing Emails - Office 365

[CyBeRkId2002]

Hi all,

 

Have seen a marked increase in phishing emails getting through to users receiving phishing-type emails and / or dodgy links recently via Office365 online.

 

Other than anti-phishing / malware threat protection being turned on (which it is by default) what are you doing to combat it? Do you have third-party email scanning?

[DrCheese]

Other than anti-phishing / malware threat protection being turned on (which it is by default)

 

 

It is, to a point. The "free" one we all get is very basic, you need ATP (M365 defender now??) to do the fancy safe link stuff. I've got a trial at the moment & it automatically pulled a phishing email out of a users mailbox the other day without me having to do anything, so it might be worth a look.

[MartinT]

The 365 A5 Security licence is what you need for all staff. Very effective at scanning all attachments and URLs within messages. Enrol all machines into it and you can start using the Security Admin portal a lot more effectively. It does indeed warn of malicious content and pulls it before you've even taken a look.

[sonofsanta]

There's the Office 365 Advanced Threat Protection, but the cost of that very quickly got out of hand once you were covering all mailboxes. We've just started with Barracuda Total Email Protection which has all the same stuff (link protection, file scanning & sandbox execution, AI phishing analysis, incident response...) but was less than half the price over three years. (Sophos was a bit cheaper, but the functionality wasn't as advanced--basically felt like a fancy UI on top of the standard 365 tools). It's still not cheap, per se--working out about £4k/year here, based on ~130 FTE staff same as Microsoft's EES licensing--but it's gotten to a point where I no longer felt comfortable being reactive in the email security arms race, and wanted every layer of protection I could get so I can sleep at night. Edited June 11, 2021 by sonofsanta

[kennysarmy]

The 365 A5 Security licence is what you need for all staff. Very effective at scanning all attachments and URLs within messages. Enrol all machines into it and you can start using the Security Admin portal a lot more effectively. It does indeed warn of malicious content and pulls it before you've even taken a look.

 

Why just for staff not all domain users?

 

Just curious.

[MartinT]

Sorry, typed that in a rush. Staff and Students get an A3 Office 365 licence with an A5 Security licence.

 

Governors and visiting teachers get an A1 licence.

[Ratcliffepg]

We use TrendMicro cloud app security, in simple terms link to office 365 and then scans all email before it is delivered, also scans one drive and SharePoint.

[malware]

ESET Cloud Security is top notch and now has support for 365 applications including anti-phishing.

 

Not cheap though