One RFQ Number, Two Real Suppliers, 17 Minutes Apart
ID: 1565e60a-7d87-591f-9ddd-50ffd944db72
STIX ID: report--1565e60a-7d87-591f-9ddd-50ffd944db72
Feed Name: IRONSCALES
Threat Score
Two authenticated emails from different supplier Microsoft 365 tenants, sent 17 minutes apart to the same UK charter airline, reused the same RFQ reference number, email template and landing-page path (View_RFQ68453_.pdf → /aerosupply/technic/aviation.html), creating a cross-sender phishing fingerprint that evaded per-sender trust; SOC analysts marked both messages malicious and provided IOCs and MITRE mappings.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.