This week, there was an incident with one of our clients where they received a mass credential harvesting email and several of the users clicked on the link and input their passwords. I immediately had those credentials reset and deleted all the messages from their Exchange server, cleared the users’ sessions, and gave some more…