Exchange intercepts phishing emails
I believe that phishing mail is no stranger to mail administrators, and so on.
So how to put an end to this kind of email?
Simply create a new rule here
Named phishing mail, as long as it contains the words "liter", "mail", "box", "match" and "forehead", all are redirected to the administrator and the title of Cheat Mail: is appended.
New-TransportRule-Name phishing mail-PrependSubject "Cheat Mail:"-RedirectMessageTo "admin@contoso.com"-SubjectOrBodyMatchesPatterns "rise [\ w\ W] * mail [\ w\ W] * box [\ w\ W] * with [\ w\ W] * amount"
After Dangdang, done, and make sure that it will not be stopped by mistake, you can directly change it to the deletion strategy.
