Mike Swanson
6bb00601b7
Two phishing campaigns hit Glaztech on 2026-04-17 bypassing MailProtector via exposed M365 MX record. Spoofed internal senders, forwarded by 8 users. Fixes applied: removed direct M365 MX, DMARC p=reject, Enhanced Filtering on inbound connector. 32 messages purged across all affected mailboxes. Forensic samples + full incident report preserved. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
32 lines
1.6 KiB
JSON
32 lines
1.6 KiB
JSON
[
|
|
[
|
|
"seastman@glaztech.com",
|
|
"AAMkADE2ZWQxNTRiLTU0MmEtNDUzZi04YTJhLTFhZGY4OTJkM2VkMQBGAAAAAADPsBKOi2yPR7MWeEcmEyCYBwC2Dl0BExD9Q4vMdTx506HpAAALQUmuAABeKKO0aPI-QbCbxBC9WbLMAAGMOWtJAAA=",
|
|
"Fw: ATTN : MaiIbox Password Login Expire today, 4/17/2026 - "
|
|
],
|
|
[
|
|
"seastman@glaztech.com",
|
|
"AAMkADE2ZWQxNTRiLTU0MmEtNDUzZi04YTJhLTFhZGY4OTJkM2VkMQBGAAAAAADPsBKOi2yPR7MWeEcmEyCYBwC2Dl0BExD9Q4vMdTx506HpAAALQUmwAABeKKO0aPI-QbCbxBC9WbLMAAAgufgkAAA=",
|
|
"RE: ATTN : MaiIbox Password Login Expire today, 4/17/2026 - "
|
|
],
|
|
[
|
|
"seastman@glaztech.com",
|
|
"AAMkADE2ZWQxNTRiLTU0MmEtNDUzZi04YTJhLTFhZGY4OTJkM2VkMQBGAAAAAADPsBKOi2yPR7MWeEcmEyCYBwC2Dl0BExD9Q4vMdTx506HpAAALQUmwAABeKKO0aPI-QbCbxBC9WbLMAAAgufglAAA=",
|
|
"FW: ATTN : MaiIbox Password Login Expire today, 4/17/2026 - "
|
|
],
|
|
[
|
|
"seastman@glaztech.com",
|
|
"AAMkADE2ZWQxNTRiLTU0MmEtNDUzZi04YTJhLTFhZGY4OTJkM2VkMQBGAAAAAADPsBKOi2yPR7MWeEcmEyCYBwC2Dl0BExD9Q4vMdTx506HpAAALQUmuAABeKKO0aPI-QbCbxBC9WbLMAAGMOWtpAAA=",
|
|
"RE: ATTN : MaiIbox Password Login Expire today, 4/17/2026 - "
|
|
],
|
|
[
|
|
"seastman@glaztech.com",
|
|
"AAMkADE2ZWQxNTRiLTU0MmEtNDUzZi04YTJhLTFhZGY4OTJkM2VkMQBGAAAAAADPsBKOi2yPR7MWeEcmEyCYBwC2Dl0BExD9Q4vMdTx506HpAAALQUmwAABeKKO0aPI-QbCbxBC9WbLMAAGMOqoYAAA=",
|
|
"Fw: ATTN : MaiIbox Password Login Expire today, 4/17/2026 - "
|
|
],
|
|
[
|
|
"seastman@glaztech.com",
|
|
"AAMkADE2ZWQxNTRiLTU0MmEtNDUzZi04YTJhLTFhZGY4OTJkM2VkMQBGAAAAAADPsBKOi2yPR7MWeEcmEyCYBwC2Dl0BExD9Q4vMdTx506HpAAALQUmuAABeKKO0aPI-QbCbxBC9WbLMAAGMOWtrAAA=",
|
|
"RE: ATTN : MaiIbox Password Login Expire today, 4/17/2026 - "
|
|
]
|
|
] |