Syntax Bearror

Top Menu

  • Home
  • PowerShell Resource
  • SpiceWorld 2019 Resources
  • Contact Us
  • About Us

Main Menu

  • Home
  • Blog
  • IT Guides
  • How-To’s
  • IT Fixes
  • Cybersecurity
  • Reviews
  • Home
  • PowerShell Resource
  • SpiceWorld 2019 Resources
  • Contact Us
  • About Us

logo

Header Banner

Syntax Bearror

  • Home
  • Blog
  • IT Guides
  • How-To’s
  • IT Fixes
  • Cybersecurity
  • Reviews
Blog
Home›Blog›The Growing Issue of Spam for Outlook.com Personal Accounts

The Growing Issue of Spam for Outlook.com Personal Accounts

By Christopher
March 21, 2021
3064
0
Share:

In the past couple of months, I’ve seen an uptick of spam coming through my outlook.com account that I haven’t seen since the service was relaunched in 2012. Even worse, it appears their filtering features are not working as intended, leading to an increase that is annoying users near and far who rely on the service. After unsuccessful attempts to resolve the issue with support, I figure it’s time to go public with the concerns in hopes Microsoft might actually spend some time on the issue.

The Spam

So, these are your run-of-the-mill spam emails. They often have large header text that links outbound and an image. These aren’t super comprehensive phishing attempts. Common themes include:

  • Tinnitus Medication
  • Life Insurance
  • Keto Weight Loss Systems, Diet Pills, Etc.
  • Gutter Protection
  • Lottery Scams
  • Roundup Lawsuits
  • Senior Discounts
  • Dating

As you can imagine, I would expect a traditional spam filter to generally handle these kinds of emails, and while there are plenty of ways spammers can go around typical word filters, this is fairly patterned behavior. Especially when they are coming from the same primary domains, just different sub-domains, which now brings me to the next issue which falls under the filtering features.

The Flawed Filtering System

The first issue, and probably the largest I’ve observed comes from the way Outlook.com is filtering emails. At times, it appears Microsoft is not even honoring the blocklist and just delivers the email to my inbox anyway. The domains these emails come from include:

Claimed Email Domains

  • vinuse[.]com
  • methodmezique[.]com
  • ailostore[.]com
  • pastesoffers[.]com
  • monoochrome[.]com
  • amazonses[.]com
  • ducksplayground[.]com
  • generateheader[.]com
  • abod44[.]com
  • ningsupportraini[.]com
  • gesammelt[.]com
  • createurmethod[.]com
  • buyiptv[.]us
  • merrell[.]pl
  • slobodni[.]net
  • tangled[.]com
  • nodyehaircolor[.]com

These emails are often sent from subdomains of the above domains, or you will find multiples of these domains in a single email header such as one for the from, one from the reply to, and one for the bounceback notification. Microsoft’s own documentation suggests the domain alone in your blocklist should be sufficient, but the emails continue to come in. Reviewing the 50 or so headers I’ve taken the time to review, the majority of these emails seem to come from one particular web host out of Canada.

The Reporting System

The second issue I see has to do with the reporting system. For the longest time, I figured when I clicked the Junk option in Outlook.com and chose Junk or Block, that it would actually send some kind of metric to the team that handles spam control for the Outlook.com service, but it appears to do nothing more than place it in my settings.

To actually report a spam email in Outlook.com, you have to right-click an email in your inbox to open the context menu, navigate to Security Options, and then click Report Abuse. Once you’ve done that, a form appears asking you to categorize the email, place a comment, and confirm you understand this will send the contents of the email to Microsoft for analysis.

While you get a nice confirmation of your report, these reports seem to go to a single inbox at Microsoft corporate which ironically, blocks some of them because they were identified as spam. Which, is great that they identified that, but then why did it hit my inbox?

The Decaying Customer Support Experience

The third and final issue I see going on has to do with the Microsoft Support service. It appears that Microsoft’s support surrounding the issues for consumers often uses canned responses about using the blocklist and rules to accomplish eliminating your spam problem. Even if you say it was already in the blocklist, then just repeat themselves or say to use rules. They are not escalating the concerns regarding non-functional components of the service, and eventually, you just close the ticket out of frustration.

Looking at the UserVoice for Outlook.com, accessible from the Feedback button, in trending feedback, there are currently over 4200+ votes for “Blocked Email Selected Not Being Blocked” which tells me the issue is far from isolated.

This experience is not new to Microsoft. In fact, one of my biggest frustrations with Microsoft is their poor customer service experience on the first and second tiers of technical support both for consumers and businesses. They appear to be outsourced, with KPI’s focused on closure and rapid resolution so much so that they don’t actually attempt to resolve the issue unless you start getting frustrated with them, and even then, it’s a toss whether they properly respond or escalate. At this point, I feel an AI chatbot would give me the same level of poor service.

As much as I appreciate and often champion Microsoft technologies to friends, coworkers, and businesses, this issue (and the support experience) are harming the long-term. Consumer experience often influences business interest, and if Microsoft continues to degrade the consumer experience and the reliability of their services or features, then how can you empower every person and every organization to achieve more?

TagsMicrosoftOutlook.com
Previous Article

Fixing APC PowerChute Personal Edition Not Detecting ...

Next Article

How to Avoid Frustration With Microsoft Intune ...

Share:

Christopher

Christopher Clai is a Senior Security Engineer, IT Generalist, and Developer from Chicago, IL with over 20 years of experience in Information Technology ranging from small businesses to Fortune 500's. Chris loves the Pacific Northwest, Sushi, Invader Zim, Rugby, World of Warcraft, raves, and is an avid user of Microsoft and Linux-based technologies.

Related articles More from author

  • Colorado Flag Waving
    Bear Security

    Bear Security – Security News for the Week of July 19th, 2021

    July 19, 2021
    By Christopher
  • Bear Security

    Bear Security – Security News for Week of June 5th, 2021

    June 5, 2021
    By Christopher
  • Bear Security

    Bear Security – Security News for the Week of July 5th, 2021

    July 5, 2021
    By Christopher
  • Bear Security

    Bear Security – Security News for Week of June 12th, 2021

    June 12, 2021
    By Christopher
  • Frag Attack Icon
    Bear Security

    Bear Security – Security News For Week of May 15th, 2021

    May 15, 2021
    By Christopher
  • Looking suspiciously at a Lemon Duck
    Bear Security

    Bear Security – Security News For Week of May 22nd, 2021

    May 22, 2021
    By Christopher

Leave a reply Cancel reply

  • Picture of Service Listing with Print Spooler in Center
    Blog

    Disable Print Spooler on Domain Controllers (If You Can)

  • Blog

    PrintNightmare Part III – Patching and Remediation Updates

  • Green Code on Laptop Screen with Hand on Keyboard
    Bear Security

    Bear Security – Security News for Week of June 19th, 2021

Follow Us on Social

See the Syntax at These Events

All appearances for 2020 have been cancelled due to COVID-19. Stay safe out there and see you all at events in 2021!

Like This Content?

Help Sytnax Bearror create more content, videos, podcasts, scripts, and more by contributing to our caffiene and technology addictions.

Subscribe to our Patreon

Buy Us a Coffee

Most Popular

IT Fixes

Fixing APC PowerChute Personal Edition Not Detecting UPS on Windows 10

  • Dell Laptops Showing “Press Power Button and Volume Down to Login”

    By Christopher
    September 13, 2019
  • How to Root AT&T Samsung S5 G900A (Up to Lollipop 5.0)

    By Christopher
    May 21, 2015
  • PrintNightmare Part II – Print Spooler Remains Vulnerable Across Windows

    By Christopher
    July 3, 2021
  • Picture of Service Listing with Print Spooler in Center

    Disable Print Spooler on Domain Controllers (If You Can)

    By Christopher
    June 30, 2021

Latest Tweets

  • T

    7 hours ago

Categories

Bear Security Blog Cybersecurity How To's IT Fixes Reviews

Copyright Statement

Creative Commons License
This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.
©2014 - 2021 - SyntaxBearror.io. All rights reserved unless otherwise noted.