Posted 17 November 2017 - 10:50 PM
I wanted to see if anyone else has seen this campaign or might know more info on what Ive seen today.
The campaign is that the actor sent a targeted spam titled, company name account holder . It has a link that says update your account which has a URL to cognitioforms.com/companyname.
After the user clicks on the link, the user gets infected and spams the internal organization with a link to our legitimate webmail link.
Im perplexed to why thisll spam our internal users with our webmail link.
Any ideas are welcome.