---
id: 8047
title: "Bypassing External Mail Forwarding Restrictions with Power Automate"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/adversary-simulation/bypassing-forwarding-restrictions-power-automate/"
published_at: "2020-06-25T00:00:00Z"
tags: ["adversary-simulation", "office-365", "bypass", "exchange", "power-automate", "email-forwarding"]
phying_url: "https://phying.com/item/8047"
lang: en
---

# Bypassing External Mail Forwarding Restrictions with Power Automate

## Summary

When Exchange blocks external forwarding rules, attackers can abuse Power Automate: an Outlook-connected flow silently forwards mail out of the tenant, evading anti-exfiltration controls.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2020-06-25T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/adversary-simulation/bypassing-forwarding-restrictions-power-automate/
- **Phying News:** https://phying.com/item/8047