# Credential leak

> A phishing page took the Company credentials, and a stranger used them.

## What happens

A phishing page took the Company credentials, and a stranger used them.

## How to prevent it

Read the domain, not the logo. Report the Mail as phishing and it loses its button.

The postmortem opens the first of these that you do not own yet:

- [Web application firewall](https://wiki.playquorum.dev/research/waf.md)

## Facts

SEV1 Credential leak
- **First Era:** [Pre-seed](https://wiki.playquorum.dev/eras/pre-seed.md)
- **Starts at:** SEV1
- **Escalates to:** —
- **Lasts:** 1.5 min

## See also

- [Incidents](https://wiki.playquorum.dev/incidents.md)

Source: https://wiki.playquorum.dev/incidents/credential-leak