This sample looks like a compromised user of a tenant with a Hotmail dropbox. 
With only the single example, it's hard to deduce a larger pattern while I'm on 
vacation, but ...

I've asked other team members to give it a peek.

It was marked as spam by our outbound filter:

X-Forefront-Antispam-Report: ...SFV:SPM

Aloha,
Michael.
--
Sent from my Windows Phone
________________________________
From: Alarig Le Lay<mailto:ala...@gozmail.net>
Sent: ‎12/‎1/‎2016 3:20 PM
To: mailop@mailop.org<mailto:mailop@mailop.org>
Subject: [mailop] Many spams from *.outbound.protection.outlook.com

Hi,

I received many spams from Microsoft servers today. One of those is
pasted here: 
https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fpaste.swordarmor.fr%2Fraw%2FB2OM&data=02%7C01%7Cmichael.wise%40microsoft.com%7C3d9d20dc97374c8e211008d41a4092ff%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636162312045888988&sdata=bYnmDrKPtSB4fyf9%2Bx2MnmSMpqeDk0lDTXj9OkJBeiw%3D&reserved=0

Am I the only in that case?

--
alarig
_______________________________________________
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Reply via email to