When reporting phishing attempts and other malware, you may be asked to forward the suspicious message as an attachment. In Exchange for the Web, this is as simple as dragging the suspicious message into a new email message.
An animated image of the above instructions.