IRONSCALES reported that a fully authenticated email reached two mailboxes with a four-line settlement approval lure and one link, where the sender alias asserted the recipient's own company name and the mailbox behind it was a scraped marketing tracking string.
Public source
Publisher name
Public post
A fully authenticated email reached two mailboxes with a four line settlement approval lure and one link. SPF passed, DKIM passed twice, DMARC passed. Below the lure, th…
Company
IRONSCALES
The leading enterprise cloud email security platform combining AI and human insights protecting 18,000 global customers.
- Industry
- Computer and Network Security
- Location
- Atlanta, US
- Company size
- 51–200 employees
About IRONSCALES
IRONSCALES is the leader in AI-powered email security protecting over 17,000 global organizations from advanced phishing threats. As the pioneer of adaptive AI, we detect and remediate attacks like business email compromise (BEC), account takeovers (ATO), and zero-days that other solutions miss. By combining the power of AI and continuous human insights, we safeguard inboxes, unburden IT teams, and turn employees into a vital part of cyber defense across enterprises and managed service providers. IRONSCALES is headquartered in Atlanta, Georgia. To learn more, visit www.ironscales.com or follow us on X @IRONSCALES
See moreLatest activity
Latest activity from IRONSCALES
32 signals
Presence & Recognition
IRONSCALES announced that Jess Burn, Principal Analyst at Forrester, is joining the team to break down how AI changed the effectiveness curve on BEC, credential theft, and vendor impersonation.
Legal & Regulatory
IRONSCALES received an internal HR notice about a salary increase for a national sales director at a food and produce manufacturing company.
Technology & Infrastructure
IRONSCALES reported that a DocuSign notice reached the chief executive of a small energy company, showing no links or attachments, no SPF, DKIM, DMARC, or sender/recipient role signals.
Discover more
Similar signals
Similar public activity from other companies.
Technology & Infrastructure
Invictus Incident Response
Invictus Incident Response pulled apart a BEC lure from a legitimate grocery retailer's mailbox, which landed with genuine sender reputation.
Technology & Infrastructure
secureless.ai
secureless.ai experienced an automated email response where the agent's identity check was triggered by the victim's address and the agent's identity check reading that header.
Products & Services
ThreatDown
ThreatDown Email Security runs on IRONSCALES, using AI, NLP, computer vision, and behavioral analysis to catch phishing, BEC, credential harvesting, and malware, with crowdsourced intelligence from over 16,000 security teams.
Technology & Infrastructure
Yubico
Yubico reported that a threat actor conducted a coordinated voice phishing campaign combined with credential harvesting.
Technology & Infrastructure
RADICL