troubleshooting Question

Exchange 2010 Server - Phishing attack

Avatar of MattRichardson
MattRichardsonFlag for United States of America asked on
Email ClientsExchangeEmail Servers* Blacklist
3 Comments1 Solution909 ViewsLast Modified:
We recently had a phishing attack that only harvested one account. This one account then began to SPAM thousands of emails via our OWA. We caught the account and shut it down, but not before we were placed on a Microsoft Blacklist. After about a week and a half, we are now off the list and mail will start flowing in 24-48 hours.

I am looking for best practices to avoid this issue in the future.

1.) Is there a way to limit the amount of email a user can send over a period of time?
2.) Is there a way to find and delete a particular email or attachment from multiple boxes without opening each account?
ASKER CERTIFIED SOLUTION
Scott C
Senior Engineer

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Log in to continue reading
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform for $9.99/mo
View membership options
Unlock 1 Answer and 3 Comments.
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
See how we're fighting big data
The Value of Experts Exchange in My Daily IT Life

Experts Exchange (EE) has become my company's go-to resource to get answers. I've used EE to make decisions, solve problems and even save customers. OutagesIO has been a challenging project and... Keep reading >>

Mike

Owner of Outages.IO
Phoenix, Arizona, United States
Member Since 2016
Join a full scale community that combines the best parts of other tools into one platform.
Unlock 1 Answer and 3 Comments.
View membership options
“All of life is about relationships, and EE has made a virtual community a real community. It lifts everyone's boat.”
William Peck

Member since 2004