{"id":20041,"date":"2019-12-27T10:01:20","date_gmt":"2019-12-27T15:01:20","guid":{"rendered":"https:\/\/www.sherweb.com\/blog\/?p=20041"},"modified":"2020-06-15T15:50:49","modified_gmt":"2020-06-15T19:50:49","slug":"microsoft-365-forwarding-block","status":"publish","type":"post","link":"https:\/\/www.sherweb.com\/blog\/security\/microsoft-365-forwarding-block\/","title":{"rendered":"Stop spammers in Microsoft 365 with Office Protect’s forwarding block"},"content":{"rendered":"

We\u2019ve talked before about how to flag any outbound spam<\/a> leaving your organization, which is essential to prevent someone who\u2019s just starting from sending spam or one-off emails that might go out.<\/p>\n

But what happens if, as often happens with spam, someone decides to send out spam emails automatically, en masse? Obviously, it would be helpful to know that it happened after the fact, but if they\u2019ve already emailed everyone on your client list, the damage is done.<\/p>\n

Fortunately, Office Protect still has you covered. With the setting \u201cEnable Client Rules Forwarding Block,\u201d you can stop spammers before they start.<\/p>\n

 <\/p>\n

Learn how Office Protect helps keep your Microsoft 365 tenants safe with our e-book<\/a><\/h3>\n

 <\/p>\n

How outbound spam works<\/h2>\n

Phishing scams occur when hackers get someone to open a malicious email by pretending to be a trustworthy source. They often use tactics such as fake domain names or enticing subject lines to get people to take the \u201cbait.\u201d v<\/p>\n

Outbound spam is essentially phishing on the receiving end – people are more likely to open emails from someone they know and trust. Except this time, in their eyes, the email is from someone they know and trust, so it\u2019s even more undetectable.<\/p>\n

This works especially well in businesses. After all, we swap emails with important attachments back and forth every day. Hackers take advantage of this, particularly with the use of invoices. In fact, 26% of all phishing scams<\/a> include fake invoices.<\/p>\n

Once the recipient opens the attachment, malware is downloaded into their system. Hackers have successfully taken your good name and exploited it for their own gain.<\/p>\n

So what is malware, and what damage does it really cause? Malware is a catch-all term for any software spread specifically to be malicious. It can come in many forms, but the most common are listed below.<\/p>\n

 <\/p>\n

What is malware?<\/h2>\n

Ransomware<\/strong> – While ransomware is declining due to advanced security measures, it can still wreak havoc on your organization. Ransomware is designed to lock you out of your systems or take your data hostage until your company pays the hackers a set amount for them to give back access. Ransomware often targets small businesses, and the amount is usually small enough to warrant just paying it rather than risking weeks or days of a lockout by involving the police.<\/p>\n

Spyware<\/strong> – The sneakiest type of malware, spyware is installed without the user\u2019s knowledge. It can run in the background of your system, slowly collecting and transferring your data out of the organization for weeks or even months until it is discovered.<\/p>\n

Keyloggers<\/strong> – Like spyware, keyloggers can run undetected in the background, but they are specifically designed to log every keystroke the user enters. This is a great way for hackers to gain usernames and passwords to allow deeper access to your most important data.<\/p>\n

Virus<\/strong> – The most common type of malware, viruses spread by \u201cinfecting\u201d files on your computer, often one after the other until the machine overloads and shuts down completely.<\/p>\n

 <\/p>\n

The danger of mass spam emailing<\/h2>\n

If hackers gain access to your network, they can send out an email from your inbox<\/em> to all your contacts almost instantaneously, and the consequences of that quick action for them can be far-reaching and long term for you.<\/p>\n

So what\u2019s the worst that could happen? Well, if you are a managed service provider or reseller, malware in your system could give hackers access to all your clients. Malware on one client\u2019s system could infect all your other clients sharing the same server or cloud space.<\/p>\n

Once your clients realize that you allowed malware into their systems, that could cause a major breach in trust, which is vital in your line of work. If clients lose confidence in you, they will be very unlikely to continue to use you for their data and IT services. They could even discuss what happened with colleagues from other companies, costing you future business and your professional reputation.<\/p>\n

Even in a best-case scenario where outbound spam reaches all recipients but they do not open it, your reputation will take a hit. If nothing else, you\u2019ll be marked as someone who sends out annoying spam emails. And it\u2019s very likely that at least one of the spam emails will be opened. Research shows that about a third of email attachment<\/a>s in phishing emails are opened.<\/p>\n

 <\/p>\n

Office Protect’s Enable Client Rules Forwarding Block setting<\/h2>\n

Fortunately, Office Protect is here to ensure that mass spam emails never come from inside your organization. With the setting \u2018Enable Client Rules Forwarding Block\u2019 turned on, you can rest easy knowing your company is safe from this particular attack.<\/p>\n

When turned on, this setting allows security control to create a transport rule to stop external, auto-forward type messages from leaving your tenant. The following criteria must be met for this rule to engage:<\/p>\n