Sorting Emails Flagged as Suspicious

Issue/Question

I'm receiving several suspicious email messages, every day, and they're all marked as "[??SUSPICIOUS??]". Can I automatically move these messages to a folder?

Environment

  • WKU Email

Cause

Our email system adds "[??SUSPICIOUS??]" to the subject of emails that are suspected of being phishing scams. You can learn more about phishing scams by visiting our Phish Bowl. You must regard any messages requesting your personal information as suspicious until proven otherwise.

When users respond to phishing scams, it allows an attacker to take over their email account. Then, the email accounts are used to send thousands of spam and phishing emails to the entire address book. Because the emails come from legitimate WKU accounts and attackers frequently change tactics to avoid suspicion, it's very difficult to accurately detect and prevent these messages from arriving in your inbox.

Resolution

 Warning: If an email is wrongly flagged as suspicious (false positive), it will be moved to the Suspicious folder once this rule is created. It is important to periodically check the suspicious folder for legitimate messages that may have been moved there inadvertently. Furthermore, not all scams will be marked as "[??SUSPICIOUS??]" (false negative). You must continue to regard any message requesting your personal information as suspicious, even if it is not flagged.

  1. Log into your email account online.
  2. Below Folders on the left-side, right-click on your Name.
     Note: You may have to click More to see your name.
  3. Click Create new folder.
  4. A blank box will appear below your other folders. Type "Suspicious" and press the Enter key.
  5. In the top-right corner of the screen, click on the  Settings icon.
  6. Click View all Outlook setting.
  7. Click Mail.
  8. Click Rules.
  9. Click the + plus icon below Inbox Rules.
  10. Enter "Move Suspicious Email to a Folder" in the Name box.
  11. Click the box below When the message arrives, and it matches all of these conditions.
  12. Hover over It includes these words and select in the subject...
  13. In the Enter words... box, type in "[??SUSPICIOUS??]".
  14. Click the + plus icon.
  15. Click OK.
  16. Click the box below Do all of the following.
  17. Hover over Move, copy, or delete and select Move the message to folder...
  18. Click on the Suspicious folder (created in step 4).
  19. Click OK.
  20. Click  OK at the top of the screen.
  21. You may close the Outlook settings winds to return to your inbox.

Details

Article ID: 2808
Created
Thu 7/20/17 3:35 PM
Modified
Fri 1/15/21 11:40 AM