troubleshooting Question

Exchange 2010 Server - Phishing attack

Avatar of MattRichardson
MattRichardsonFlag for United States of America asked on
Email ClientsExchangeEmail Servers* Blacklist
3 Comments1 Solution909 ViewsLast Modified:
We recently had a phishing attack that only harvested one account. This one account then began to SPAM thousands of emails via our OWA. We caught the account and shut it down, but not before we were placed on a Microsoft Blacklist. After about a week and a half, we are now off the list and mail will start flowing in 24-48 hours.

I am looking for best practices to avoid this issue in the future.

1.) Is there a way to limit the amount of email a user can send over a period of time?
2.) Is there a way to find and delete a particular email or attachment from multiple boxes without opening each account?
ASKER CERTIFIED SOLUTION
Scott C
Senior Engineer

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Join our community to see this answer!
Unlock 1 Answer and 3 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 3 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros