Starting to wonder if this is a continuation attack from the Okta breach* a while back
* Whether or not you call it a breach depends on perspective I suppose
* Whether or not you call it a breach depends on perspective I suppose
It should be a simple matter for CF to figure out which is the case.
It would be nice to know if CF customers were also targeted.