Forum Discussion
Phishing campaigns accurately notifying users their password has expired.
We have a 180 day password reset for all our users. This is the first we've done this as a response to our accounts being hacked last year. We've also enforced MFA. I'm seeing some emails in qua...
I can think of four possibilities:
1) The hacker from the prior hacking event downloaded the last password change date for all accounts, and they are using that data to create convincing emails
2) The hacker is still inside your network
3) The hacker is guessing at the expiration date and getting very lucky
4) These are legitimate password expiration emails
My recommendation is to hire a forensic team to investigate further.
1) The hacker from the prior hacking event downloaded the last password change date for all accounts, and they are using that data to create convincing emails
2) The hacker is still inside your network
3) The hacker is guessing at the expiration date and getting very lucky
4) These are legitimate password expiration emails
My recommendation is to hire a forensic team to investigate further.