3
Are there other ways to add Content Filtering Rules to an account?
Question asked by James Tieman - 5/27/2021 at 7:02 AM
Unanswered
Here's the story.  I have an accountant that stopped getting most of their email.  They use Outlook and never go directly online to manage or view email, always Outlook.  After a lot of investigating, I found 5 rules in Content Filtering.  They were named, contents, future, payment, percocets and ndjnjdn.  They all move the email to Deleted Messages.  The interesting thing is, contents looks for "invoice", future looks for "payment", payment looks for "wire transfer", percocets looks for "account" and ndnjdn looks for "multiple(4)", whatever that is, are all terms related to accounting.  I didn't add them and I know she didn't either.  Is there any other explanation for this mystery? 

2 Replies

Reply to Thread
3
kevind Replied
Yes, the account got hacked/compromised, likely due to phishing. Change password immediately!

Also look for changes in Reply To and Forwarding.
3
ScottF Replied
My rule is if you notice strange / mysterious things with a mailbox, change the password first and investigate later.

Reply to Thread