I have users that receive a ton of SPAM that have aliases associated to their account. The SPAM is addressed to the alias which winds up in the users mailbox that the alias is associated with. SPAM received that is directly addressed to the user is very, very minimal. Unfortunately all the users with aliases are typically managers. In my case, I have an alias of firstname.lastname@example.org. 99% of all the SPAM I receive, and it's allot, is addressed to that alias address. It's as if any message sent to an alias bypasses any type of SPAM filtering.
Any insight and help resolving this would greatly be appreciated,