This article guides you through setting up the “Report Phishing” button that will be visible to users within Outlook (desktop and web version).
The goal is to allow users to easily report suspicious emails by sending them to a specially created shared mailbox.
Step-by-step procedure:
1. Log in to the Microsoft Admin Console
2. Click on "Settings" and then select "App Integrations”:
3. Click on "Get Apps":
4. On the Microsoft 365 Apps page, type "Report Phishing" in the search bar. In the results, click on "Get App" next to "Report Phishing":
Once the app is selected, the deployment wizard will automatically start.
5. In the "Add Users" section, configure the following settings:
-
Is this a test deployment? leave the toggle off on "No"
-
In "Assign Users" select the value "Entire Organization"
5. Once the app is downloaded, log in to the Microsoft Defender console, scroll down the screen, and select "Settings > Email & Collaboration"
6. Select the "User Reported Settings" option.
7. Leave the settings configured as default regarding the option "Use the default Report button in Outlook"
8. Scroll down to the "Reported Message Destinations" section and configure the reported message to be sent to the mailbox dedicated to receiving reports by selecting the option "Only my mailbox". In the "Add an online Exchange mailbox to send reported messages to" section, enter the address of the specially created shared mailbox:
Note: It's important to select "Only my mailbox" to prevent Cyber Guru domains' reports from reaching Microsoft and being blacklisted.
11. Click on "Save"