Using Outlook for Android in business environments for email and scheduling
Hi, Addie.
It is easy to take security measures and ignore this email, as you suggested. However, if you look into the headers, this may be something bigger than just an isolated, user-targeted attack.
The email is not in the Sent or Deleted items, but could have been deleted from the server. Please check your hub and edge servers. Below is the Message ID for mine. I highly recommend starting investigation before this gets wider impact.
====================
Received: from TYWP301MB0148.JPNP301.PROD.OUTLOOK.COM (::1) by TYCP301MB0320.JPNP301.PROD.OUTLOOK.COM with HTTPS; Mon, 2 Sep 2024 07:38:05 +0000 Received: from AS8PR04CA0064.eurprd04.prod.outlook.com (2603:10a6:20b:313::9) by TYWP301MB0148.JPNP301.PROD.OUTLOOK.COM (2603:1096:400:2d8::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7918.23; Mon, 2 Sep 2024 07:38:04 +0000 Received: from AMS1EPF0000004B.eurprd04.prod.outlook.com (2603:10a6:20b:313:cafe::7c) by AS8PR04CA0064.outlook.office365.com (2603:10a6:20b:313::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7918.25 via Frontend Transport; Mon, 2 Sep 2024 07:38:01 +0000 Authentication-Results: spf=softfail (sender IP is 166.1.211.233) smtp.mailfrom=outlook.com; dkim=none (message not signed) header.d=none;dmarc=fail action=none header.from=outlook.com; Received-SPF: SoftFail (protection.outlook.com: domain of transitioning outlook.com discourages use of 166.1.211.233 as permitted sender) Received: from me880.com (166.1.211.233) by AMS1EPF0000004B.mail.protection.outlook.com (10.167.16.136) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7918.13 via Frontend Transport; Mon, 2 Sep 2024 07:38:01 +0000 X-IncomingTopHeaderMarker: OriginalChecksum:EDA3836EB171DAB31B495A83DCCA806E12D1980914558F7466FF50C51A7D524A;UpperCasedChecksum:2318793C125ADD9473E3FA7D07B560FCEEE734764D47AAEBF64DFBB7457D5F77;SizeAsReceived:312;Count:7 Message-ID: <****@outlook.com>**