@racheltobac @nytimes I got one of these a while back - I think there's something additonal many of us can learn as infosec professionals as well. Rather than throw up our hands - I reported their malware installer to AV vendors and got that blocked. Their malware was an installer for some endpoint management software, so I dug into what account they were using and got that account nuked by the endpoint management provider.