Inbound Emails with Macro Enabled Attachments
Spambrella have implemented logic into our engines to help deal with the recent Dridex campaigns in which emails contain macro enabled attachments. As such there may be emails with legitimate macro enabled attachments being detected as spam and subsequently quarantined. If this occurs it is recommended that the end user recipient release these from quarantine. For silent users the org admin or channel admin can release these emails on their behalf.