@jerry @snopes from their narrative, the snopes peeps cannot log into the x account, as the attacker added an mfa they dont have access to. so, both snopes and attacker locked out at this point. suggest purging users from that shared email account and changing that pass/mfa