[RKDinOKC]

Oh boy, my brother got his Office 365 email account brute force attacked and logged into from Singapore.
He had a complicated password too. BUT no Multi-Factor Authentication.
That proofpoint anti-span the new boss is paying for warned us, but did not block?
When brother gets back home wiill have to go install MalewareBytes and scan his computer to make sure the hack didn't install anything sending password changes.

We didn't have this problem when I managed the anti-spam on our 365 using 365's anti-spam. I blocked forgeigh countries from logging in unless a user specivically asked to travel outside the US. But hey, what do I know, I only have 29 years experice.