PoisonSeed Launches Supply Chain Phishing Attacks on CRM and Bulk Email Services

PoisonSeed is a supply-chain focused phishing campaign impersonating CRM and bulk-email platforms (e.g., Mailchimp, SendGrid, HubSpot) to harvest credentials, export subscriber lists, create persistent API keys, and use compromised accounts to deliver cryptocurrency-targeted scams; the report includes IoCs (phishing domains, C2 IPs), WHOIS patterns, and mitigation advice such as MFA, API monitoring, and blocking known malicious infrastructure.