TLDR Tech / InfoSec
Hackers Target Cybersecurity Firm Outpost24 in 7-Stage Phish
Attackers deployed a sophisticated, seven-stage phishing campaign targeting an Outpost24 executive with a JPMorgan-themed email that successfully bypassed DKIM checks and existing email security controls. The malicious link traversed through Cisco Secure Web, Nylas tracking, a compromised Indian firm, an expired and reused domain, and a Cloudflare-hosted site before ultimately leading to a Microsoft 365 credential harvesting page.
Read the full story