TLDR Tech / InfoSec
Hackers Target Cybersecurity Firm Outpost24 in 7-Stage Phish
Attackers launched a sophisticated seven-stage phishing campaign against an Outpost24 executive, using a JPMorgan-themed email that bypassed existing security controls and DKIM checks. The malicious link traversed through Cisco Secure Web, Nylas tracking, a compromised Indian firm, an expired-reused domain, and a Cloudflare-hosted site before leading to a Microsoft 365 credential harvesting page.
Read the full story