Mailbox intelligence based impersonation protection action set to move message to junk mail folder.

Why This Matters

Mailbox intelligence impersonation protection is a critical defense against phishing attacks that spoof trusted senders. When the action is misconfigured to only move messages to the junk folder instead of quarantining them, users may still access malicious content, increasing the risk of credential theft and malware delivery. Proper configuration ensures impersonated emails are automatically isolated before reaching the end user.

What Aether365 Checks

This check verifies that mailbox intelligence based impersonation protection in your Microsoft 365 anti-phishing policy is set to move detected impersonation attempts to the junk mail folder. It appears in the Aether365 dashboard under microsoft-365 checks as ORCA.116.