How to report spam and phishing e-mail sent to SF State e-mail addresses

The following information details how to correctly report spam and phishing e-mail sent to SF State e-mail addresses.

 


Phishing E-mail from Internal, Compromised SF State Accounts

If a phishing/spam message originates from an internal, compromised SF State account, SF State should be notified. Compromised SF State accounts can only be resolved by SF State. Microsoft spam filtering does not scan messages sent from one SF State Exchange account to another. Please report compromised SF State accounts to the ITS Help Desk so we can stop the phishing message distribution as quickly as possible. To report compromised SF State accounts, forward a copy of the message with full headers to service@sfsu.edu.

Some messages that look like they are from an internal account are really spoofed messages sent using an external server. This can be identified from the message header. Spoofed messages should be reported to Microsoft. The ITS Help Desk can assist in identifying the spoofed messages.

 


Phishing E-mail from External Accounts

If the phishing/spam message originates from an external address/server, forward a copy of the message with full headers to abuse@sfsu.edu and abuse@messaging.microsoft.com.  This will inform Microsoft who can add it to the block list.

 


Forwarding with Headers/As an Attachment

Use the following instructions to report spam/phishing to the correct address:

 

Outlook 2010/2013

  1. Address a new message to the correct recipient: service@sfsu.edu or abuse@sfsu.edu; abuse@messaging.microsoft.com
  2. Click Attach Item
  3. Select Outlook Item
  4. Locate and select the e-mail message you want to report
  5. Check Attachment
  6. Click OK
  7. Click Send

 

Outlook 2011

  1. Select the e-mail message you want to report from the list of messages (do not open message)
  2. Click Attachment
  3. Address the message to the correct recipient: service@sfsu.edu or abuse@sfsu.edu; abuse@messaging.microsoft.com  
  4. Click Send

 

OWA (Outlook Web Access)

  1. Select the e-mail message in the list of messages
    • Windows: right mouse click on the message and select Forward as attachment from the popup menu.
    • Mac OS: control+click on the message and select Forward as attachment from the popup menu.
  2. Address the message to the correct recipient: service@sfsu.edu or abuse@sfsu.edu; abuse@messaging.microsoft.com
  3. Click Send

 

Office365

  1. Login to Office365 Mail
  2. Click New Mail
  3. In the new mail message, click on the separate window icon, open separate window icon, located at the top right corner of the message window. This will open this message in its own window
  4. Arrange both the new mail message window and the Office365 mail list window to view both windows at the same time
  5. Drag the email from the Office365 mail list into the new message you are composing. It will be included as an attachment
  6. Address the message to the correct recipient: service@sfsu.edu or abuse@sfsu.eduabuse@messaging.microsoft.com
  7. Enter any other relative information in the subject and email body
  8. Click Send button

 

Thunderbird

  1. Open the e-mail message you want to report  
  2. Select Message > Forward As > Attachment 
  3. Address the message to the correct recipient: service@sfsu.edu or abuse@sfsu.eduabuse@messaging.microsoft.com
  4. Click Send

 

Mac Mail

  1. Open the e-mail message you want to report 
  2. Select View > Show all headers
  3. Click Forward
  4. Address the message to the correct recipient: service@sfsu.edu or abuse@sfsu.eduabuse@messaging.microsoft.com
  5. Click Send

 

Gmail

  1. Open the e-mail message you want to report 
  2. Select Show original from the More Options pull down
  3. Copy the text from the new window
  4. Paste the text into a new message
  5. Address the message to the correct recipient: service@sfsu.edu or abuse@sfsu.eduabuse@messaging.microsoft.com
  6. Click Send