Originally Posted by
LearningToFly
Obviously a scam, at least in my opinion. When it’s beginning with “Immediate action required”, I do not answer.
So logging into Marriott's site with your existing ID/pwd and getting this message is obviously a scam?
Who exactly are you not going to answer?
How will you ever log in to Marriott's site it it is forcing you to change your password and you "do not answer"?
Originally Posted by
kennycrudup
Just don't log into sites you're directed to via email links as a matter of course. Safer that way.
Good general advice, but not relevant to OP.
And yes, many common "security" processes are laughed at by security professionals. Force a user to change passwords every 60 days, with no repeats, and they'll start writing in on a sticky at their desk to keep track of it.