When a client’s mailbox is sending fake invoices, the password reset is only the beginning

When a client starts sending fake invoices to vendors and customers, the instinct is to reset the password and turn on multifactor authentication. That’s not enough.