azcomputerguru/claudetools
1
0
Fork 0
Code Issues 58 Pull Requests Actions Packages Projects Releases Wiki Activity

Glaztech phishing incident: 32 messages purged, MX/DMARC/EFC hardened

Browse Source 
Two phishing campaigns hit Glaztech on 2026-04-17 bypassing MailProtector
via exposed M365 MX record. Spoofed internal senders, forwarded by 8 users.

Fixes applied: removed direct M365 MX, DMARC p=reject, Enhanced Filtering
on inbound connector. 32 messages purged across all affected mailboxes.
Forensic samples + full incident report preserved.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Mike Swanson
2026-04-17 10:47:24 -07:00
parent 996dd515b1
commit 6bb00601b7
7 changed files with 1626 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

32
clients/glaztech/reports/2026-04-17-phishing-delete-list.json Normal file
View File

@@ -0,0 +1,32 @@
[
[
"seastman@glaztech.com",
"AAMkADE2ZWQxNTRiLTU0MmEtNDUzZi04YTJhLTFhZGY4OTJkM2VkMQBGAAAAAADPsBKOi2yPR7MWeEcmEyCYBwC2Dl0BExD9Q4vMdTx506HpAAALQUmuAABeKKO0aPI-QbCbxBC9WbLMAAGMOWtJAAA=",
"Fw: ATTN : MaiIbox Password Login Expire today, 4/17/2026 - "
],
[
"seastman@glaztech.com",
"AAMkADE2ZWQxNTRiLTU0MmEtNDUzZi04YTJhLTFhZGY4OTJkM2VkMQBGAAAAAADPsBKOi2yPR7MWeEcmEyCYBwC2Dl0BExD9Q4vMdTx506HpAAALQUmwAABeKKO0aPI-QbCbxBC9WbLMAAAgufgkAAA=",
"RE: ATTN : MaiIbox Password Login Expire today, 4/17/2026 - "
],
[
"seastman@glaztech.com",
"AAMkADE2ZWQxNTRiLTU0MmEtNDUzZi04YTJhLTFhZGY4OTJkM2VkMQBGAAAAAADPsBKOi2yPR7MWeEcmEyCYBwC2Dl0BExD9Q4vMdTx506HpAAALQUmwAABeKKO0aPI-QbCbxBC9WbLMAAAgufglAAA=",
"FW: ATTN : MaiIbox Password Login Expire today, 4/17/2026 - "
],
[
"seastman@glaztech.com",
"AAMkADE2ZWQxNTRiLTU0MmEtNDUzZi04YTJhLTFhZGY4OTJkM2VkMQBGAAAAAADPsBKOi2yPR7MWeEcmEyCYBwC2Dl0BExD9Q4vMdTx506HpAAALQUmuAABeKKO0aPI-QbCbxBC9WbLMAAGMOWtpAAA=",
"RE: ATTN : MaiIbox Password Login Expire today, 4/17/2026 - "
],
[
"seastman@glaztech.com",
"AAMkADE2ZWQxNTRiLTU0MmEtNDUzZi04YTJhLTFhZGY4OTJkM2VkMQBGAAAAAADPsBKOi2yPR7MWeEcmEyCYBwC2Dl0BExD9Q4vMdTx506HpAAALQUmwAABeKKO0aPI-QbCbxBC9WbLMAAGMOqoYAAA=",
"Fw: ATTN : MaiIbox Password Login Expire today, 4/17/2026 - "
],
[
"seastman@glaztech.com",
"AAMkADE2ZWQxNTRiLTU0MmEtNDUzZi04YTJhLTFhZGY4OTJkM2VkMQBGAAAAAADPsBKOi2yPR7MWeEcmEyCYBwC2Dl0BExD9Q4vMdTx506HpAAALQUmuAABeKKO0aPI-QbCbxBC9WbLMAAGMOWtrAAA=",
"RE: ATTN : MaiIbox Password Login Expire today, 4/17/2026 - "
]
]