This site requires JavaScript to be enabled

How to report spam and phishing email using non-standard applications

12 views

The following information details how to correctly report spam and phishing email sent to SF State email addresses.

 

Phishing Email from Internal, Compromised SF State Accounts

If a phishing/spam message originates from an internal, compromised SF State account, SF State should be notified. Compromised SF State accounts can only be resolved by SF State. Microsoft spam filtering does not scan messages sent from one SF State Exchange account to another. Please report compromised SF State accounts to the ITS Service Desk so we can stop the phishing message distribution as quickly as possible. To report compromised SF State accounts, forward a copy of the message with full headers to service@sfsu.edu.

Some messages are really spoofed messages: they look like they are from an internal account, but are actually sent using an external server. This can be identified from the message header. Spoofed messages should be reported to Microsoft. The ITS Service Desk can assist in identifying the spoofed messages.

Phishing Email from External Accounts

If the phishing/spam message originates from an external address/server, forward a copy of the message with full headers to abuse@sfsu.edu and abuse@messaging.microsoft.com. This will inform Microsoft who can add it to the block list.

Forwarding with Headers/As an Attachment

Use the following instructions to report spam/phishing to the correct address:

Thunderbird

  1. Open the email message you want to report  
  2. Select Message > Forward As > Attachment 
  3. Address the message to the correct recipient: service@sfsu.edu or abuse@sfsu.edu; abuse@messaging.microsoft.com
  4. Click Send

Mac (Apple) Mail

  1. Open the email message you want to report 
  2. Select View > Show all headers
  3. Click Forward
  4. Address the message to the correct recipient: service@sfsu.edu or abuse@sfsu.edu; abuse@messaging.microsoft.com
  5. Click Send

Gmail

  1. Open the email message you want to report 
  2. Select Show original from the More Options pull down
  3. Copy the text from the new window
  4. Paste the text into a new message
  5. Address the message to the correct recipient: service@sfsu.edu or abuse@sfsu.edu; abuse@messaging.microsoft.com
  6. Click Send