Credential leak

A phishing page took the Company credentials, and a stranger used them.

What happens#

A phishing page took the Company credentials, and a stranger used them.

How to prevent it#

Read the domain, not the logo. Report the Mail as phishing and it loses its button.

The postmortem opens the first of these that you do not own yet:

  1. Web application firewall