Microsoft Add-In (AppSolute Security a.k.a. KillPhish)

Overview

The Microsoft version of AppSolute Security a.k.a. KillPhish is an advanced email threat protection add-in for Microsoft 365. It works on the Outlook Web App (OWA), Outlook for desktop on both Windows and Mac, Outlook for iOS, and Outlook for Android. AppSolute Security can give an email a risk assessment (low, medium, or high risk). It enables reporting phishing and other types of threats. Each inbox's risk profile is unique, and AppSolute Security can help expose telltale signs of threats to your security.

Using AppSolute Security Outlook Plug-in.

AppSolute Security will provide helpful tips related to dealing with suspicious emails and provide a risk assessment of potentially harmful emails. Using AppSolute Security, users can report suspicious emails to the IT Team at the click of a button.

The AppSolute Security widget is pictured below.

• Risk Level This is the risk level the email was classified as by the plugin. There are three risk levels: low risk (for scores >= 95), medium risk (for emails scored between 60 and 95), and high risk (for emails scored below 60). Several different factors influence an email's score: the headers (DKIM, DMARC, and SPF), if certain attachments are included in the email (HTML and EXE attachments, for example, decrease an email's score), and if certain words/phrases appear in the email. Also, any links in the email will be checked by Google Webrisk and if they are dangerous, the email will be marked as high risk.
• Helpful Tips contains suggestions for dealing with potentially harmful emails, including reviewing links before clicking, verifying file types of attachments, and considering the ramifications of following any instructions or actions requested in the email.
• Details list important properties of the email and their values, including the sender, subject, SPF record pass/fail (if SPF checks fail, the email will be labeled as high risk), attachments, and links contained in the email. Only shows if Advanced Threat Protection is on for the AppSolute Security plugin.
• Links/Attachments lists all links and attachments in the email, and their associated URLs and file types. Only shows if Advanced Threat Protection is on for the AppSolute Security plugin.
• Words/Phrases assesses certain keywords and phrases typically associated with risky emails, including but not limited to, 'password', 'IRS', 'label', and 'invoice'. Only shows if Advanced Threat Protection is on for the AppSolute Security plugin.

* Disclaimer: Users should remain vigilant against email security threats, even if the Zix Protect, Proofpoint, or Trend Micro Advanced Threat Protection feature is turned on in your plugin. ATP is not capable of detecting every social engineering/phishing threat in emails.

Using AppSolute Security Mobile Plug-in.

The AppSolute Security widget is only available for mobile devices from within the Outlook app. To access the options menu, select an email then tap the options ellipses in the top-right corner of the email window.

Once the options menu is displayed, tap the AppSolute Security icon to open the widget.

If you have set a Reported Success Message in the AppSolute Security settings, then this message will appear below the green checkmark after the user has reported the message.