Post
Cabel Sasser
‪@cabel.panic.com‬
@rmondello.com Neven got this email from Portland Public Schools that is relevant to your interests. I'll be thinking about it for a while…
Dear PPS community, In recent weeks, we've seen a concerning rise in compromised student accounts. Attackers are gaining access to these accounts and using them to send thousands of phishing and scam emails worldwide. Our investigation shows that many of these breaches result from students reusing passwords across multiple services. Once attackers obtain credentials from other sites, they try them against school accounts with significant success. To better protect student accounts and reduce their value as targets, we are making a change: Students will no longer be able to set up Multi-Factor Authentication (MFA) on their Google accounts. Attackers have been exploiting this feature by enabling MFA themselves to strengthen their hold on compromised accounts. By blocking this option, we disrupt their process.
Post Cabel Sasser ‪@cabel.panic.com‬ @rmondello.com Neven got this email from Portland Public Schools that is relevant to your interests. I'll be thinking about it for a while… Dear PPS community, In recent weeks, we've seen a concerning rise in compromised student accounts. Attackers are gaining access to these accounts and using them to send thousands of phishing and scam emails worldwide. Our investigation shows that many of these breaches result from students reusing passwords across multiple services. Once attackers obtain credentials from other sites, they try them against school accounts with significant success. To better protect student accounts and reduce their value as targets, we are making a change: Students will no longer be able to set up Multi-Factor Authentication (MFA) on their Google accounts. Attackers have been exploiting this feature by enabling MFA themselves to strengthen their hold on compromised accounts. By blocking this option, we disrupt their process.

Post
Cabel Sasser
‪@cabel.panic.com‬
@rmondello.com Neven got this email from Portland Public Schools that is relevant to your interests. I'll be thinking about it for a while…
Dear PPS community, In recent weeks, we've seen a concerning rise in compromised student accounts. Attackers are gaining access to these accounts and using them to send thousands of phishing and scam emails worldwide. Our investigation shows that many of these breaches result from students reusing passwords across multiple services. Once attackers obtain credentials from other sites, they try them against school accounts with significant success. To better protect student accounts and reduce their value as targets, we are making a change: Students will no longer be able to set up Multi-Factor Authentication (MFA) on their Google accounts. Attackers have been exploiting this feature by enabling MFA themselves to strengthen their hold on compromised accounts. By blocking this option, we disrupt their process.
Post Cabel Sasser ‪@cabel.panic.com‬ @rmondello.com Neven got this email from Portland Public Schools that is relevant to your interests. I'll be thinking about it for a while… Dear PPS community, In recent weeks, we've seen a concerning rise in compromised student accounts. Attackers are gaining access to these accounts and using them to send thousands of phishing and scam emails worldwide. Our investigation shows that many of these breaches result from students reusing passwords across multiple services. Once attackers obtain credentials from other sites, they try them against school accounts with significant success. To better protect student accounts and reduce their value as targets, we are making a change: Students will no longer be able to set up Multi-Factor Authentication (MFA) on their Google accounts. Attackers have been exploiting this feature by enabling MFA themselves to strengthen their hold on compromised accounts. By blocking this option, we disrupt their process.