Received a Failure of Delivery but email was never sent by user
A user comes back from a meeting and finds 20+ 

Delivery has failed to these recipients or distribution lists:

emails to the same address. These are the following issues:

1) The user states that he never sent an email to this person;

2) He was in a meeting during the time stamp;

3)The email was sent almost every 20 seconds with different subject lines, very valid subjects lines;

4)The email address is dead and last time someone emailed this address, site-wide, was 5 months ago;

5) does not show on his sent items on his computer nor phone, and nothing in the deleted items

6) BUT when i run a message tracking in exchange, they are all there!

I am trying to find a stronger word to perplexed to describe my state of mind right now.

Best regards,

RJ


May 20th, 2015 12:48pm

we had a similar issue  the user is a CEO and mails are randomly picked up from his mailbox and sent to random users in his address book

I would suggest immediately

1. sieze all his devices where ever he/she is accessing his mailbox (smartphone, laptop, desktop, cloud, etc., )

2. run a thorough scan of all the devices ( Virus,trojans, malware,adware etc,)

3. if you are able to see the messages in the MTA you can track the source of the machine also from where its generated

good luck

Free Windows Admin Tool Kit Click here and download it now
May 20th, 2015 1:19pm

Hi ,

For your case my suggestion would be to do an message tracking to find the out the originating ip address for those messages if in case it doesn't helps you then you should have to enable the mailbox auditing to avoid such kind of issues in feature.

At the same time make sure you do have the strong anti spamming solution on the gateway products which will do Real time blacklist check ,Reverse dns lookup and spf lookup to avoid spoofing.

May 21st, 2015 1:10am

Hi Rj,

Thank you for your question.

Did the issue occur on the specific user or all user?

I suggest you post the header information of this email to ibsexc@microsoft.com for our troubleshooting.

If there are any questions regarding this issue, please be free to let me know.

Best Regard,

Jim

Free Windows Admin Tool Kit Click here and download it now
May 21st, 2015 3:26am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics