re: plans for party -- How a Compromised Argentine School Account Targeted K-12 in the U.S.
ID: 11ad2e3b-5b7a-59f2-86b5-65e7b40c20df
STIX ID: report--11ad2e3b-5b7a-59f2-86b5-65e7b40c20df
Feed Name: IRONSCALES
Threat Score
A compromised Microsoft 365 account at an Argentine educational institution was used in a targeted spear-phishing attack against a U.S. K-12 district. The email impersonated a known contact by display name, passed SPF/DKIM/DMARC, and included a same-day registered domain (ethrecn.com) hosting a randomized credential-harvesting URL; IRONSCALES community intelligence flagged and quarantined the message.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.