We Want to Hear From You! What Do You Want to See on the Community? Tell us here!
Forum Discussion
An employee's email was used to create a malicious Dropbox account
I'm hoping someone here will be able to provide further assistance on this issue.
One of our employee's mailboxes got compromised. While compromised, the bad actor setup a Dropbox account that is now sending out malicious emails.
The account is secured with MFA, which we do not control or have backup codes for. So, recovering via MFA is not an option.
We have attempted to contact Dropbox support but haven't been able to get anyone to assist with deleting the account. We have just been advised to login and delete ourselves, which is not an option.
If someone is able to assist on this, it would be greatly appreciated.
Thank you,
Nick
6 Replies
Replies have been turned off for this discussion
- Jay
Dropbox Community Moderator
Hi CNS_NJ, thanks for bringing this to our attention.
Did they change the email address on the Dropbox account?
Is the email address part of a Dropbox team or is it a personal account? Do you have the ticket ID from when you contacted the support team?
This will help me to assist further!
It is a personal Dropbox account. I am not sure if they've changed the email address yet.
I'm assuming it has not been changed, because we're getting emails forwarded from this employee's clients, and it is showing his company email address still.
The sending email is no-reply@dropbox.com but the body of the email has employee's name/company email in it. Example of the email one of his client's received.Elements of the email have been obfuscated for the privacy of the end user/client. I am happy to provide more detailed information to the support team.
The ticket number for this is #24476652. Please let me know if any further information is needed.
Thank you,
Nick- Mark
Super User II
If its using the employee email the quickest and easiest way to resolve this is to go to www.dropbox.com/forgot and request a reset of the password. Then log in and close/delete the account yourselves.
Hi Mark,
We attempted this to no avail. You cannot reset the password. The Drobox account is secured by MFA, that the bad actor controls.
We have access to the email, but without control over MFA, we cannot reset the password. This is not a viable option in our case.
- Jay
Thanks for the info. As you're already in contact with the support team under that ticket ID, they would need to be the ones to assist further on this matter.
I've gone ahead and prioritized the ticket to expedite matters on your behalf.
Thank you, Jay. We really appreciate the assistance. We'll keep an eye out for a response from support.
Thank you,
Nick
