The Sender Domain You Never Audit Is Your Own
ID: 9e105052-71aa-57cb-bde1-1bd7992c3bdc
STIX ID: report--9e105052-71aa-57cb-bde1-1bd7992c3bdc
Feed Name: IRONSCALES
Threat Score
A high-severity QR-code credential-phishing campaign targeted a UK property consultancy by sending self-addressed spoofed emails whose top-level MIME entity was a Word attachment containing QR codes that resolved to a credential-harvesting path; authentication (SPF/DKIM/DMARC) recorded failures yet messages reached mailboxes and the attack rotated across multiple employee addresses, defeating sender-based blocking and content/reputation controls.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.