Forum Discussion

Brass Contributor

Jun 19, 2020

"O365 Suite EX" and "Office365 Shell WCSS-Client" Compromised

Hi, I noticed the following Sign-in events originating from Nigeria, which is not the user location. Seems like something is compromised. Can I know what is the "O365 Suite UX" and "Of...

Azure Active Directory (AAD)

Arash0110

Copper Contributor

Aug 19, 2020

cllee, that account has been compromised, for sure, no doubt. We had the same occurrences, and had an user account which didn't have MFA enabled , hacked. And the hacking was done via phishing e-mail.

NatashaT35
Copper Contributor
Aug 28, 2020
Arash0110 Hi how did you establish account was compromised by phishing email?