Email not from HoxHunt
You can report both suspicious phishing emails and spam emails with the HoxHunt "Report this email" plugin. The plugin automatically reads the header of the email when you report it and checks whether it came from HoxHunt.
If an email is not a part of the HoxHunt training you can report it as spam or phishing.
What happens when I report an email?
Report as Spam - moves the email to your junk folder and the sender gets blocked. After this you will no longer receive emails from this email address.
Report as Phishing - forwards the email to your security team for further analysis. The quicker phishing attacks come to the attention of your security team the better secured your company is.
Spam or Phishing?
Spam - are not usually dangerous – but responding to the email or clicking the links might be a risk. Spam emails are usually advertising and are sent to a large target audience. This can include event invitations, newsletters, marketing and other emails that do not ask you to take immediate action.
Phish - are dangerous emails with malicious intent. Phishing emails are usually asking you to click on a link, open an attachment or give personal information. Phishing emails may vary with many different contents and layouts – and they can sometimes look like authentic emails. However, the email content including the links, the attachments and the sender's address are dangerous and has malicious intentions.
Still unsure? - Don't worry, some emails are difficult to categorise. If it looks suspicious, to be sure, report it as phishing. We'll take a look at the content and give you feedback. Unfortunately HoxHunt cannot provide an SLA to when your organisation will process reported emails. Please reach out to your security team if you have further questions about a suspicious email you reported.
Reporting from a Shared Mailbox
If you report an email from a shared mailbox, you need to be logged in with the shared mailbox account. Otherwise you will not be able to report the email from a shared mailbox.
- Shared mailbox account (email@example.com) has a suspicious email, you need to be logged in with firstname.lastname@example.org to report directly from that mailbox.
- If you cannot log in with the shared mailbox account, follow your company's guidelines for reporting, or forward the mail to your inbox and report it with HoxHunt there.
Note: if you are using Outlook 2010 or Gmail you won't be able to report spam emails.