Microsoft has announced they are extending enhanced anti-spoofing capabilities to all Office 365 Exchange Online users.

Previously, this feature was only available on the no one could afford plan – E5.

The enhanced anti-spoofing functionality utilizes cloud intelligence, sender reputation and patterns to identify potentially malicious domain spoofing attempts (emails that are pretending to be you and sent to either internal staff or other external people to try and trick them).

The new functionality works in conjunction with existing standards based email authentication checks (DMARC/DKIM/SPF) – These records sanitise emails and let the internet know which servers are authorised to on your behalf.

Users of Office 365 don’t need to do anything to enable this feature as it will automatically enabled over the coming months.

If you would like us to review your existing email records to ensure they are optimised to work in with these changes, please email me

Regards,
The 2Gen Security Team