Has Mimecast ZA mail servers been compromised?

[Adenoid Hynkel]

5th email today already from Mimecast ZA users that contain phishing payment content.

Anyone else receiving phishing mails through minecasts network?

 

[irBosOtter]

Well, what's currently happening is people are hacking mimecast accounts. Once they are in they send out the spam/phishing from that account in mimecast.

Companies using Mimecast need more secure passwords on their AD accounts and Mimecast accounts, and enable 2FA to sort that out.
In our mimecast logs we have 1000's of attempts per minute trying to log in different accounts, coming from different countries