[RKDinOKC]

Spent all afternoon with Exchange online tech support.

ALL of the stuff he had me do and set were after the fact. Blocking the IPs, putting in a transport rule that keeps from opening the malicious links in Outlook. Since it takes Exchange online and all the Outlook clients so long to update it's all kinda like closing the gate after the horse bolted.

Showed me how to block countries like Nigeria, but that really doesn't do much good. The last email we got was from a VPN saying they were in Dallas.