On the evening of Friday, February 7th, we suspended access to our Marketing platform. I wanted to share a little more color on the incident and the actions we’ve taken since.
The Friday incident was precipitated by a bad actor gaining credentialed access to two customer accounts on our platform, which they secured as the result of an aggressive phishing attack. This was the second time in two weeks that Khoros suspended access to the Marketing platform, and we are painfully aware of the disruption this created, particularly on the heels of the first incident. We acted with your security as our foremost concern once again, but we realize that this conservative approach is not sustainable. We have made updates to the system and our response protocols to ensure that, going forward, we will protect your brands with the minimal disruption possible for your business.
Several of you have asked if the phishing attack means that multi-factor authentication (MFA) failed. It did not. MFA still requires human intervention to enter passcodes and can therefore still be exploited by sophisticated phishing. Teams must stay vigilant about all mediums of communication (mobile, text, phone, personal social media, email, etc.) -- phishing comes in many forms! We will continue to support you on this front, and please know that your Khoros team is committed to being a resource for you on managing this risk.
If you have additional questions or want to speak to someone at Khoros directly, we encourage you to reach out to your account team or email khorosmarketingplatform@
