This only came to our notice when a new employee just joined and the very next day, she got a WhatsApp on her and her emergency contact number from a person disguised as our director. The message was like every other scam message, which creates urgency with authority and would have eventually asked to make a payment to a upi, against the promise of reimbursement from the company.
This has been happening with all our employees, they’ve all been getting emails and unfortunately one got scammed of 50k by a man disguised as me.
Today, I got this email which mentions that my password was being reset. I didn’t ask for it.
What makes me think it’s the FC is because, employees have been getting email, WhatsApp on all fields under employee master which have email and phone number format. Regardless, of whose number or email it is. To add to this, they have gotten hold of the employee DP from the doctype and using that for their WhatsApp DP.
How can we secure our FC? Is this happening with others too?
