MFA Never Saw the Phishing. SMTP Did.
Your mailbox can be abused without anyone opening webmail. Most people treat a hacked email as: someone logged into Gmail in a browser. A lot of real incidents are quieter. Someone gets a SMTP password, sends mail as you, and never touches the inbox. SMTP is how servers and apps send mail: WordPress, a monitoring […]