Skip to main content

CHK-1058 - Phishing Mailtips Enabled

wcgw-social.png

Description

  • Type: CUSTOMER
  • Severity: WARNING
  • Protection against: SOCIAL
  • FIX Available: YES

This Customer Check verifies if Mailtips are enabled for Phishing emails.

Why this check?

Employees are misled via email to leave information or make payments. An attacker will try to send emails as legitimately as possible. Mailtips are warning messages in Outlook when a potential characteristic is recognized in an email. This should make the recipient extra alert and cautious about responding to the email, opening attachments, or clicking on links.
MailTips can be displayed if:
  1. The sender has not emailed with this recipient before
  2. The email domain of the sender closely resembles that of the organization
  3. The name of the sender closely resembles that of the recipient
  4. Unusual characters in the email.

What possible outcomes does the check have?

This check has two possible outcomes. In Attic, this is reflected as follows:

  • Okay: Anti-Phishing Mailtips are enabled
  • Warning: Anti-Phishing Mailtips are not yet enabled
  • Notice: Functionality is not (fully) available in the current Microsoft license

How should this be followed up?

If the output is Warning , we advise enabling this feature. A Fix is available for this check, which we will offer through Attic.

Comments

0 comments

Please sign in to leave a comment.