310k Usa Valid Mail Access.txt -

: Compromised accounts can be used to send fraudulent invoices or "spearphishing" emails to coworkers, appearing as a trusted colleague.

: Since many users reuse passwords, these "valid" mail credentials may also grant access to the user's financial or social media accounts. Remediation & Defense 310K USA Valid Mail Access.txt

: Credential pairs (Email/Password) often formatted as email:password . : Compromised accounts can be used to send

: Primarily targeted at users within the United States . 310K USA Valid Mail Access.txt

To mitigate the risk of such leaks, security teams should implement: Use MailItemsAccessed to investigate compromised accounts