--- title: "The Ways Office 365 Phishing Can Happen | DuoCircle" description: "Join the thousands of organizations that use DuoCircle Find out how affordable it is for your organization today and be pleasantly surprised.Interested in" image: "https://www.duocircle.com/images/og-default.png" canonical: "https://www.duocircle.com/content/office-365-phishing-protection/office-365-phishing/" --- Content # The Ways Office 365 Phishing Can Happen Join the thousands of organizations that use DuoCircle Find out how affordable it is for your organization today and be pleasantly surprised.Interested in [ Talk to an Expert → ](/contact/) [ See what we make ](/products/) ## The Ways Office 365 Phishing Can Happen [Phishing Protection - Sign Up](/email/phishing-protection) _Office 365 is a popular office suite used by workplaces all over the world. Not only do Windows users utilize it, but iOS customers do as well._ That’s how versatile Office 365 is. But just because it’s widely used doesn’t mean it doesn’t have its vulnerabilities. Windows has [over 60 million](https://www.windowscentral.com/there-are-now-12-billion-office-users-60-million-office-365-commercial-customers) commercial customers, which means cybercriminals are drawn to this enormous pool of potential victims. You can avoid being an **Office 365 phishing** victim by learning what you need to watch out for. Read on and find out how you can identify **phishing attacks**. ![](https://media.mailhop.org/duocircle/images/2019/02/phishing-online-business.png) ### Fake non-delivery emails Office 365 phishing attacks are so effective because they [masquerade as Microsoft](https://www.bleepingcomputer.com/news/security/phishing-attack-pretends-to-be-a-office-365-non-delivery-email/). A fake non-delivery email from “Microsoft” looks harmless enough. It’s cleverly replicated so you don’t think twice about clicking on “send again.” However, once you do, it’ll open a **spoofed Office 365 login** page. _Your login credentials are then sent to the cybercriminals after you type them in_. With this information, they’ll try other websites to see if they can access your accounts. _This non-delivery email scam is sophisticated since it involves a JavaScript function_. This function sends your credentials to the scammers discreetly and redirects you to the genuine Outlook login page so you don’t suspect a thing. MORE: [Office 365 Phishing Email Example](/content/office-365-phishing-protection/office-365-phishing-email-example) ### Circumvention of Office 365 anti-phishing measures [Office 365 Advanced Threat Protection](/content/office-365-phishing-protection/office-365-advanced-threat-protection) comes as part of the office suite. It’ll block any emails if their attachments or links match ones that are known to be malicious. Otherwise, the emails make it through [office 365 atp anti-phishing](/content/office-365-phishing-protection/office-365-atp-anti-phishing) security. Cybercriminals know this and have found a workaround. _They send legitimate files through programs like SharePoint so their communication with you is successful_. But inside the file are the **malicious links**. When you click on the links, you’ll get a spoofed login page. MORE: Setup [Office 365 Anti-Phishing Policy](/content/office-365-phishing-protection/office-365-anti-phishing-policy) ![](https://media.mailhop.org/duocircle/images/2019/03/two-email-impersonation-1.png)![](https://media.mailhop.org/duocircle/images/2019/02/phishing-protection-advanced.png) ### Ways to detect phishing attacks Here are a few simple ways you can tell if an email is a **phishing attack**: - Display names or email addresses have different characters (e.g. a capital “i” in place of an “l”) - Unexpected links or attachments - Spelling and grammar errors - Lack of corporate signatures If you notice any of these red flags, be sure to let your security officer know so your entire workplace can be on alert. MORE: [Office 365 Phishing Email 2018](/content/office-365-phishing-protection/office-365-phishing-email-2018) ### Upgrade your email security for Office 365 To get the best security for Office 365, you can’t just rely on [office 365 phishing protection](/content/office-365-phishing-protection) alone. _**Anti-phishing software** can be an excellent add-on to your existing cybersecurity_. The more defenses you have, the better you can catch any phishing attempts that might slip through the cracks. MORE: [Enable Office 365 Phishing Protection](/content/office-365-phishing-protection/enable-office-365-phishing-protection) ![](https://media.mailhop.org/duocircle/images/2019/02/increased-phishing-attacks.png) ##### Join the thousands of organizations that use DuoCircle --- Find out how affordable it is for your organization today and be pleasantly surprised. [Phishing Protection - Sign Up](/email/phishing-protection)Interested in our Partner Program for MSPs and VARs? Visit Our [MSP Partner Program](/msp-partner-program). ## Ready to talk? Same-day response from someone technical. We tell you yes or no quickly. If yes, we get to work. [Talk to an Expert→](/contact/)[See what we make](/products/) ```json {"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}} ``` ```json [{"@context":"https://schema.org","@type":"WebPage","name":"The Ways Office 365 Phishing Can Happen","description":"Join the thousands of organizations that use DuoCircle Find out how affordable it is for your organization today and be pleasantly surprised.Interested in ","url":"https://www.duocircle.com/content/office-365-phishing-protection/office-365-phishing/","speakable":{"@type":"SpeakableSpecification","cssSelector":[".page-answer",".duo-rich-text p:first-of-type"]},"dateModified":"2023-08-07T12:52:07.000Z","datePublished":"2019-04-12T16:57:47.000Z"},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"DuoCircle","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"The Ways Office 365 Phishing Can Happen","item":"https://www.duocircle.com/content/office-365-phishing-protection/office-365-phishing/"}]}] ```