The Distribution Agreement That Arrived with a Thread Full of Latin
ID: e6bd728c-97cb-5a4f-89c6-8c116e69b328
STIX ID: report--e6bd728c-97cb-5a4f-89c6-8c116e69b328
Feed Name: IRONSCALES
Threat Score
A targeted spearphishing email to a CEO used a PDF attachment that fabricated an internal multi-reply thread and a "Review and Sign" call-to-action to harvest credentials; the sender appeared as [email protected], DKIM passed but failed DMARC alignment, SPF softfailed, and Microsoft quarantined the message after behavioral detection and community reporting identified credential theft and VIP targeting.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.