Yesterday, I learned of a free tool that anyone can use for a suspicious email.  A service called VirusTotal (well known for its ability to scan malware) will scan suspicious emails for you and let you know if there is a virus in it.

Please keep in mind that the service will not tell you if it’s “spoofed” i.e. a fake, misleading email.

If you receive a suspicious email, forward it to Scan@VirusTotal.com , with “Scan” as the subject.  VirusTotal will email you back, letting you know if the email contains a virus or malware.

Again, please keep in mind that the service won’t tell you that an email is legitimate, just if there is a virus in it. Always be cautious of emails you receive, due to the nature of your organization’s connections.

Please be cognizant that the file and results will be public, so if you’ve inadvertently sent sensitive information to this address, the file will be public.