Re: Spike in O365 risky "unfamiliar" sign-ins?

[Brandon Hume <brandon.hume () DAL CA>]

On 2019-09-20 4:32 p.m., Frank Barton wrote:
> We've had 10/10 compromised accounts today having been on the chegg 
> list. and a couple more that are targeted, but haven't gotten in.


Just at end-of-day, we had *hundreds* of accounts all being tested 
within a half-hour, and all we examined closely appeared in the Chegg 
breach.  The attacker(s) made themselves notable by bouncing through Tor.


**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community