You might see that the Dropbox Community team have been busy working on some major updates to the Community itself! So, here is some info on what’s changed, what’s staying the same and what you can expect from the Dropbox Community overall.

Forum Discussion

CNS_NJ's avatar
CNS_NJ
New member | Level 1
5 days ago

An employee's email was used to create a malicious Dropbox account

I'm hoping someone here will be able to provide further assistance on this issue.

One of our employee's mailboxes got compromised. While compromised, the bad actor setup a Dropbox account that is now sending out malicious emails.

The account is secured with MFA, which we do not control or have backup codes for. So, recovering via MFA is not an option.

We have attempted to contact Dropbox support but haven't been able to get anyone to assist with deleting the account. We have just been advised to login and delete ourselves, which is not an option.

If someone is able to assist on this, it would be greatly appreciated.

Thank you,
Nick

  • Jay's avatar
    Jay
    Icon for Dropbox Staff rankDropbox Staff

    Hi CNS_NJ, thanks for bringing this to our attention.

     

    Did they change the email address on the Dropbox account? 

     

    Is the email address part of a Dropbox team or is it a personal account? Do you have the ticket ID from when you contacted the support team?

     

    This will help me to assist further!

    • CNS_NJ's avatar
      CNS_NJ
      New member | Level 1

      It is a personal Dropbox account. I am not sure if they've changed the email address yet.

      I'm assuming it has not been changed, because we're getting emails forwarded from this employee's clients, and it is showing his company email address still.

      The sending email is no-reply@dropbox.com but the body of the email has employee's name/company email in it. Example of the email one of his client's received.

      Elements of the email have been obfuscated for the privacy of the end user/client. I am happy to provide more detailed information to the support team.

      The ticket number for this is #24476652. Please let me know if any further information is needed.

      Thank you,
      Nick

      • Jay's avatar
        Jay
        Icon for Dropbox Staff rankDropbox Staff

        Thanks for the info. As you're already in contact with the support team under that ticket ID, they would need to be the ones to assist further on this matter.

         

        I've gone ahead and prioritized the ticket to expedite matters on your behalf.

About Security and Permissions

Start a discussion in the Dropbox Community forum to get help with your account security and permissions. Find support from Community members.

Need more support

If you need more help you can view your support options (expected response time for an email or ticket is 24 hours), or contact us on X or Facebook.

For more info on available support options for your Dropbox plan, see this article.

If you found the answer to your question in this Community thread, please 'like' the post to say thanks and to let us know it was useful!