Below are the steps you can use to reproduce a ‘report phish’ button in Outlook that automatically sends your security or IT department a full copy of the phishing emails. If you are good at scripting or have some workstation management tools this should be no problem to implement across the enterprise. I didn’t want to enlist a developer to create an Outlook add-in button, so I came up with a relatively easy solution.
I wanted the same thing for my security program, but we didn’t contract with PhishMe, so I needed another solution. Their solution for end-user reporting is an add-in in Outlook, providing a simple way for the end-user to click a button to report messages. The service also provides an easy way for end-users to report the messages to their IT department and use for statistical tracking. PhishMe offers a great solution for the enterprise with its anti-phishing training and phishing simulations. NOTE: This article has been updated with an additional easier option for building an enterprise-wide phishing button.Add a ‘report phishing’ button in Outlook forward spam and phishing emails to your internal security team the right way!