Post #3703321

State of phishing: Mail sent from an older domain (>3 years) + backed by a real looking company website + domain and company fit the business area of targeted corp.only 1 hit on vtinitial mail: auth, signature, everything is clean and neat: "Can we send you documents about a project we would like to get a quote from you?"Only suspicious thing at this point: some of the targeted users are not handling quotations (some others yes).Only way to assert it is a phish:download the files sent over a file sharing platforminspect the docs and follow the linksverdict: multi-stage + device code phishing Stay safe out there.