There is a lot of malspam with some *.sharepoint.com urls. Typically there MS Office files or other malicious files attached.
What's the best practice to handle this sort of threat? Whitelisting the legit SharePoint domains? What if a partner shares a link to an unlisted SharePoint domain?
