Mouse Computer: a phished staff mailbox sent fake emails to 1,220 business customers and partners

1. 2020-05-08 17:05

   A phishing email reached an employee in purchasing, who gave away a mail ID and password on a fake site. [3]

2. 2020-05-12 11:16

   The account, entered with the stolen password, sent similar phishing emails. Recipients reported them. [2] [3]

3. 2020-05-13

   Public disclosure. [1]

4. 2020-05-15

   A second report gave the sequence of events and the number of emails sent. [3]

1,220 phishing emails went to business customers and partners, and their email addresses may have leaked. [2] [3]

The account password was changed to shut out the intruder, and recipients were told what had happened and asked to delete the email and not enter any ID or password. [2] [3]