Emails are being delivered to the email account but do not show up in the Inbox folder. Turns out this is because emails are going to the RSS Feeds folder instead of the Inbox. This is different to the previous post on this issue.
It took a while to figure out that this was what was happening. The symptom was that emails were no longer being received to the Inbox. Microsoft shows them delivered, but they would not turn up in the Inbox.
This change occurred right after the mailbox was compromised and was used to send out Spam. The email password was changed and the mailbox brought under control, but email was not flowing as expected.
RSS Feeds Folder Redirection
We checked rules on the Microsoft 365 server. We checked the email address flow and it showed emails were being delivered. So if email shows as delivered why was it not in the Inbox?
We checked email Quarantine and did see some activity there due to the sending of the Spam.
We finally discovered that on the email account settings at https://outlook.office365.com a rule had been added that moved all incoming emails to the RSS Feeds folder.
Go to the account online, go to settings, all setting, Mail and check Rules.
It would appear that as part of the attack against this email account a new rule for all incoming mail to be moved to the RSS Feeds folder was part of it. We are not sure if this RSS feed was being monitored, but simply turning off and removing the rule resolved the issue.
The email account then had to be reviewed to move emails from the RSS Feeds Folder back to the Inbox, and testing showed that emails now arrived in the Inbox as expected.
How do these rules get put in there? Is there a larger security threat to the account that needs to be dealt with?
Yes, this is usually due to the account being compromised.
Here is a tip if you have this problem but don’t see the rule. I could not see this rule on my Outlook app on my PC, but it was there when I logged in to outlook in my browser. So probably go to https://outlook.office365.com/ and log in.
The rules were there named as \\ deleted them and problem solved.
I had the same problem. No rules were there, doing some digging I wondered if a hidden rule has been created or client side.
Long story short, somehow the Win10 built-in email client was moving files to this folder! No idea how
Thank you. This resolved my issue.