russ6100

Just as I suspected all along, it was SAC that was responsible for enforcing a policy, essentially "masquerading" as a WDAC policy. All...

Well, looking at @TonikJDK's profile, he doesn't speak for Windows Dev. His manager will probably get a snippy email from MS PR next week.

7 hours ago, Microsoft's Jim Kennedy (@TonikJDK) announced on X that `bypassnro` is done. There are a lot of folks with pitchforks...

No, I just got rid of the email. I reported it Microsoft and went on with my day. The faster I got rid of it, the better.

Did you later right-click on the button / link and "copy link" to see the URL?

Oh so not advertising spam - he was "spamming" phishing emails.

Thank you for your comment, Russ. I have a slightly different theory. The hacker stored the emails in the Conversations folder for two...

Advertising spam?

Yes, hacker had access to the emails. He also sent out spam emails to 265 people in the user's contact list.

Knowing that the victim would eventually have access to the emails stored in the "Conversations" folder, it would seem that the attacker...

The email was delivered to him, just not in its usual location. The hacker created an Outlook or Exchange rule to place the emails in...

If the attacker was able to make a rule, he obviously had access to the victims email. I'm assuming that in the victim's environment...

This is absolutely true if he was doing more than passively sniffing. If he was in the position to manipulate the responses, he could...

@neemobeer After I ran the query, I found that the hacker spent most or all of its time with the email. And I see where it created a...

Sort of. Unencrypted DNS can also be modified, so I can send you to my-mailicious-server.com instead of google.com, but you won't know...