Analytics BIOC Informational
✕

X-Forefront-Antispam-Report has flagged this email as a potential threat

This email has been categorized by X-Forefront-Antispam-Report as a threat, suggesting it is likely malicious in nature (e.g., spam, phishing, impersonation, etc.).

Module:
Email Security
Licensed by:
Email Security
Data source:
Microsoft 365 Emails
ATT&CK tactics: Initial Access (TA0001) Defense Evasion (TA0005) Execution (TA0002)
ATT&CK techniques: Phishing (T1566) Impersonation (T1656) User Execution (T1204)
Attacker's goals:

Achieve financial gain, distribute malware, or phish for sensitive information through mass unsolicited emails.

Investigative actions:

Examine email headers to trace origins and check for signs of spoofing. Analyze the email content for spam indicators like suspicious links and aggressive marketing language. Monitor further actions taken, such as file downloads or access to potentially malicious links.

Test period:
N/A (single event)
Deduplication:
1 Day
15 variations:
  • X-Forefront-Antispam-Report has categorized this email as containing malware (AMP) Informational
  • X-Forefront-Antispam-Report has categorized this email as containing malware (MALW) Informational
  • Email contains an attachment flagged by X-Forefront-Antispam-Report as malware due to its file type Informational
  • Email identified by X-Forefront-Antispam-Report as a phishing attempt Informational
  • Email flagged by X-Forefront-Antispam-Report as a highly confident phishing attempt Informational
  • Email flagged by X-Forefront-Antispam-Report as impersonating internal communication Informational
  • X-Forefront-Antispam-Report has strongly flagged this email as spam Informational
  • X-Forefront-Antispam-Report flagged this email as spam Informational
  • X-Forefront-Antispam-Report has flagged this email as a bulk email Informational
  • X-Forefront-Antispam-Report has flagged an internal email as spam Informational
  • X-Forefront-Antispam-Report has flagged this email as attempting to forge the sender's identity Informational
  • X-Forefront-Antispam-Report has flagged this email as impersonating a specific user within the organization Informational
  • X-Forefront-Antispam-Report has flagged this email as impersonating the organization's domain Informational
  • X-Forefront-Antispam-Report has flagged this email as using advanced impersonation techniques Informational
  • X-Forefront-Antispam-Report has flagged this email as impersonating a well-known brand Informational