<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Weird authentication behavior from Dropbox upon receiving a suspicious email. in Security and Permissions</title>
    <link>https://www.dropboxforum.com/t5/Security-and-Permissions/Weird-authentication-behavior-from-Dropbox-upon-receiving-a/m-p/670426#M7892</link>
    <description>&lt;P&gt;Hi,&lt;BR /&gt;&lt;BR /&gt;There is some evidence that an actual link from dropbox, sent from &lt;A href="mailto:no-reply@dropbox.com," rel="nofollow" target="_blank"&gt;no-reply@dropbox.com,&lt;/A&gt; with right domain and certificate, was related to an attack attempt and I would like some opinions.&amp;nbsp;&lt;/P&gt; 
&lt;P&gt;&amp;nbsp;&lt;/P&gt; 
&lt;P&gt;The behavior is weird. It was shared with a list of people and asks for credentials, but any password, right or wrong, asks for a MFA code.&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt; 
&lt;P&gt;Is that normal? Why would it ask for MFA code after wrong passwords?&lt;/P&gt; 
&lt;P&gt;&lt;BR /&gt;Any help is appreciated.&lt;BR /&gt;Thanks&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;</description>
    <pubDate>Thu, 23 Mar 2023 00:49:37 GMT</pubDate>
    <dc:creator>rgdes</dc:creator>
    <dc:date>2023-03-23T00:49:37Z</dc:date>
    <item>
      <title>Weird authentication behavior from Dropbox upon receiving a suspicious email.</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/Weird-authentication-behavior-from-Dropbox-upon-receiving-a/m-p/670426#M7892</link>
      <description>&lt;P&gt;Hi,&lt;BR /&gt;&lt;BR /&gt;There is some evidence that an actual link from dropbox, sent from &lt;A href="mailto:no-reply@dropbox.com," rel="nofollow" target="_blank"&gt;no-reply@dropbox.com,&lt;/A&gt; with right domain and certificate, was related to an attack attempt and I would like some opinions.&amp;nbsp;&lt;/P&gt; 
&lt;P&gt;&amp;nbsp;&lt;/P&gt; 
&lt;P&gt;The behavior is weird. It was shared with a list of people and asks for credentials, but any password, right or wrong, asks for a MFA code.&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt; 
&lt;P&gt;Is that normal? Why would it ask for MFA code after wrong passwords?&lt;/P&gt; 
&lt;P&gt;&lt;BR /&gt;Any help is appreciated.&lt;BR /&gt;Thanks&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;</description>
      <pubDate>Thu, 23 Mar 2023 00:49:37 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/Weird-authentication-behavior-from-Dropbox-upon-receiving-a/m-p/670426#M7892</guid>
      <dc:creator>rgdes</dc:creator>
      <dc:date>2023-03-23T00:49:37Z</dc:date>
    </item>
    <item>
      <title>Re: Weird authentication behaviour from dropbox</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/Weird-authentication-behavior-from-Dropbox-upon-receiving-a/m-p/670437#M7893</link>
      <description>&lt;P&gt;Hi &lt;a href="https://www.dropboxforum.com/t5/user/viewprofilepage/user-id/1648421"&gt;@rgdes&lt;/a&gt;, I hope you're doing well!&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;In regards to the email you received, could you possibly send me a few screenshots of the body of the email, along with the email address you received it from?&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Just make sure none of your personal info is shown there.&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Keep me posted, and we'll take it from there!&lt;/P&gt;</description>
      <pubDate>Thu, 23 Mar 2023 00:49:14 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/Weird-authentication-behavior-from-Dropbox-upon-receiving-a/m-p/670437#M7893</guid>
      <dc:creator>Megan</dc:creator>
      <dc:date>2023-03-23T00:49:14Z</dc:date>
    </item>
  </channel>
</rss>

