[WirelessGigabit]

Couple of questions here on the virus side:

    Is there a link to the sample on VirusTotal?

Looking at how I can prevent this from happening to myself, am I missing something?

    Why didn't their email-service's anti-virus pick up on virus?
    In the case that it was in a zip, why didn't said anti-virus extract the zip & scan?
    In the case of a password-protected zip, why didn't the computer scan the file upon extraction?
    In the case of a scan upon extraction, why was it missed? Outdated definitions or zero day?

Linus also spoke about invalidating sessions. This is something that requires careful planning. We can't do it due to our teams switching VPNs so often.

We do enable Impossible Travel in Okta by default for our clients.