Glaztech phishing incident: 32 messages purged, MX/DMARC/EFC hardened

Browse Source

Two phishing campaigns hit Glaztech on 2026-04-17 bypassing MailProtector
via exposed M365 MX record. Spoofed internal senders, forwarded by 8 users.

Fixes applied: removed direct M365 MX, DMARC p=reject, Enhanced Filtering
on inbound connector. 32 messages purged across all affected mailboxes.
Forensic samples + full incident report preserved.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

...

This commit is contained in:

Mike Swanson

2026-04-17 10:47:24 -07:00

parent 996dd515b1

commit 6bb00601b7

7 changed files with 1626 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

200

clients/glaztech/reports/2026-04-17-phishing-ATTN-mailbox-password.json Normal file

File diff suppressed because one or more lines are too long