We run the Barracuda ESS and a handful of users will get this same type of message throughout the day:
Hi User
Got a moment? Give me your personal cell number. Ineed you to complete a task for me.
Thanks
CFO,CEO,CMO
Where User is indicated is a real employee name and where CFO, CEO, CMO is indicated are the real CFO, CEO, CMO names. I have setup content blocking based on expression, but Is there anything else I should be doing? How did a spammer get real employee names? I would think a dictionary attack but on what, our email server?
Thanks