To prevent phishing, Office 365 has something called Advanced Threat Protection (ATP). This feature is available as an additional plan alongside an Office 365 subscription. Here are some of the key features of ATP.

Office 365 Advanced Threat Protection uses policies configured by a system administrator and filters data, suspicious behavior, and other parameters at the level of the organization, domain, user, and recipient.

Office 365 Advanced Threat Protection (ATP) can work integrated with Exchange Online Protection and Office 365 Threat Intelligence. Using ATP in the cloud can offload your mail servers and protections systems on the mail servers including on-premises servers. It is not recommended that you turn off Office 365 Advanced Threat Protection.

This feature checks the URLs contained within emails and Office documents. Before emails reach the inbox, they go through Office 365 Exchange Online Protection. There, signature-based malware protection, anti-spam and malware, and internet protocol (IP) are applied to the emails.

Once those are applied, the user can then open the email. If they click on a link, it’s immediately flagged as safe, malicious, or blocked. For malicious or blocked emails, you’ll get a warning page. ATP Safe Links works with Office documents too.

If any links in emails or Office documents take you to a downloadable file, they’re also scanned for anything harmful and blocked if necessary. This Office 365 email protection will help prevent viruses from being spread too.

Advanced Threat Analytics (ATA) is an on-premises platform that helps protect your enterprise from multiple types of advanced targeted cyber attacks and insider threats.

ATP Safe Attachments checks your emails to see if the attachments are malicious. Your global or security administrator can set the appropriate policies.

When a user under your ATP policy checks their emails, ATP Safe Attachment will scan them and take the appropriate actions according to the policy settings.

Microsoft Defender for Office 365 is a cloud-based email filtering service that helps protect your organization against unknown malware and viruses by providing robust zero-day protection, and includes features to safeguard your organization from harmful links in real time.