|Post 3285 Quartermaster email compromised
Members were contacted by JOHN WEB from the email address firstname.lastname@example.org with the subject line of "May i ask you a favor?"
. The text of the email contained:
For context, John Webb is a World War I Frederick native for whom the post is named.
What should you do
Do not respond.
If you did respond disregard any response you received. Please notify us at email@example.com if you did respond so we can keep track of who was contacted.
What are we doing to fix it
firstname.lastname@example.org is an older email address that is still in use by the Quartermaster for correspondence with various vendors and members of the post. The post owns the web domain vfw3285.org and will be moving all post communications to that domain. This will enable the post to enforce tighter security controls on the email, protect against future compromises of post email accounts, and ensure the receiver of the email can trust the sender is from VFW Post 3285. At this time we are assuming any emails sent to that account were accessible by whoever compromised the account. Comcast discovered the issue and forced a password reset shortly after the emails started so the scope of the compromise was limited. The Quartermaster's computer was scanned for malware and no issues were discovered. We are still actively investigating the issue.
If you have any questions please direct them to email@example.com