The spousette derives a substantial fraction of her income these days as managing attorney for a “virtual” law firm. She does “intakes,” and supervises a bunch of contract attorneys who require a great deal of hand-holding, and whose work products, well, benefit from some editing. Most of this, apart from telephone calls, involves document review and editing via “Microsoft Remote Desktop.” So far, so good, OK?

The other day, she receives an email, purportedly from the office manger, to the effect of “We are migrating to a different service provider. Please email me your user name and password.”

She sensibly phones the office manager, saying WTF? Office manager assures her that the email is legit, that she has discussed it with both the head of the firm and with the IT guy.

I’m thinking, “You need to get another IT guy if he countenanced that email.”

What think you, my auditors?

suspiciously,