Attack Simulation Training recording "clicked message link" when reporting as junk mail

Chris 0

I've run my 2nd simulation training attack on my team but I was surprised to see that this one had more users showing as "clicked message link". Looking into it I can see that they have reporting the email as junk (not phishing) and when I spoke to them they insisted that they had not clicked on the link but had immediately reported it.

I can see those that have reported it as phishing show up as "reported message".

I did a test of this myself and chose to report the message as junk and sure enough, it shows me as "Read Message, Clicked message link".

Surely this is an error?

Andrew Blumhardt 9,866 Reputation points Microsoft Employee

2024-11-05T11:44:00.6166667+00:00

If there is a tag for Defender for Office, please revise. This is not related to Defender for Cloud. https://learn.microsoft.com/en-us/defender-office-365/attack-simulation-training-get-started
Chris 0 Reputation points

2024-11-07T16:08:17.93+00:00

I've updated this with a different tag, there isn't one for Defender for Office.

Be good to get a response. This is an error, right? If so, is it one that'll be fixed?
Chris 0 Reputation points

2024-11-13T12:00:48.59+00:00

Had put my comment above as an answer, not sure if that led to it not being responded to.
Chris 0 Reputation points

2024-11-13T16:31:21.82+00:00

Is the answer for this to remove the protections on the reporting inbox? I've done that and tested it which now reports it only as read message. It'd be nice if it included reported but so be it.

My concern is if it leaves the reporting inbox more susceptible to phishing attacks.

Share via

Attack Simulation Training recording "clicked message link" when reporting as junk mail

Your answer