loads of Spam email from student accounts in 0365

[kingoranks]

I am dealing with Spam issue right now and it is not fun lol, I check the student account in EAC in 0365 and can see these emails went out. We ask them to change password but I need to get to the bottom of this. Last week our IP was blacklisted, any ideas?

[free780]

Turn 2 factor authentication for the student or conditional access. Depends if you have these setup and if the student is primary/secondary/fe/he.

 

Maybe restrict the account to only be able to send to internal addresses for now.

[bknaggs]

I found blocking imap access helped as well when we had a similar problem

[kingoranks]

@free780 and @bknaggs thanks both.I will go with free780 idea and restrict external contact