I finally got tired of this lack of spam filtering and using the "RULES" option under settings for MAIL, have built my own spam filtering for my aunt's account. Using a web browser on a Windows 10 laptop.
Over the course of two weeks, I looked at what emails I sent to the JUNK folder for her, and then built rules for filtering around the spam email characteristics:
- Misspelled Subject Words - created a rule and added common misspellings I saw in emails: "coverge", "auto_insurance", etc. Rule checks subject line and body for them.
- Self referral by email ID - created a rule to send any email that uses her email user ID in the subject line to the JUNK folder (most legit emails don't do this). Rule checks the subject line only.
- The rest of the rules focus on common topics of the scam emails themselves - "thephotostick", "norton"/"n0rt0n" (this could go in misspellings rule), "AARP offer", "harbor-freight", "icloud", etc.
These rules would focus on what's unique to what emails you're seeing. This has knocked down the amount of spam that sits in the INBOX by about 90%, which has been helpful. This method does require some updating from time to time, but on the plus side I have not had any false-positives as of yet.