Office 365 Sending Spam

If a mailbox is sending spam, the account is likely compromised. Immediate containment prevents further damage.

Typical causes

• Phished credentials
• Weak authentication controls
• Malicious inbox rules hiding replies

Remediation

• Contain the account
• Clean mailbox rules and forwarding
• Review tenant-wide security posture