The Voicemail That Wasn't: How Calendar File Attacks Bypass Email Security
ID: 23dd6936-1490-5449-9ddf-24634bab8575
STIX ID: report--23dd6936-1490-5449-9ddf-24634bab8575
Feed Name: IRONSCALES
Threat Score
A high-severity calendar-based phishing campaign delivered an Ambac-branded voicemail .ics attachment from [email protected] using an empty email body and identity fragmentation (different envelope sender, display name, and calendar organizer) to evade content scanners; IRONSCALES Themis auto-detected and quarantined affected mailboxes, and the report provides IoCs (sending IP 120.137.171.108, .ics MD5 e03894deb5d6f904456707011a8a6441) and mitigations for calendar invite threats.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.