Veeam Security?

[gxc11]

We are getting spammed by a inside veeam account rep, who clearly has been phished and PDF attachment is infected with a fun link embedded:

Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) NAM05-DM3-obe.outbound.protection.outlook.com (216.32.181.115)
edge.veeam.com (172.18.16.24) 10/29/2018, 12:47:18 PM
coledge01.amust.local (172.18.16.24) COLXMB01.amust.local (172.18.0.151) 10/29/2018, 12:47:18 PM
usmail.veeam.com (colxmb01.amust.local [172.18.0.151]) (using TLSv1.2 mx2.veeam.com (Postfix) 10/29/2018, 12:47:19 PM
mx2.veeam.com ([12.182.39.6])

The document hyper links to:

https : // witbankhighschool . co . za / some more stuff here /

The number in the signature rings to State Farm Insurance!

Might be time for some O365 MFA at Veeam and some end user anti-phishing training??

**
I am sending you this secure this secure document login your office email to download,
Please see attached
Regards,

Donna Koschalk
Healthcare Inside Sales Representative
VEEAM SOFTWARE CORPORATION
Office: 678-320-2616
E: donna.koschalk@veeam.com

**

Beware!

[Gostev]

Thanks for letting us know, Gerry! I've asked this employee to disconnect her computer from the network, and notified IT.