I investigated the additional MFA method and mail-filtering rules after suspicious account access. The method offered another way to maintain access, while the rules could conceal relevant messages. Recovery needed to address those account changes alongside the compromised credentials.
Viewed
Growing MSSP with Offensive Services
Account persistence and message concealment
Tracing invoice fraud through mailbox rules and MFA changes
Return to the full story ←