Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
12 IOCs
Protecting organizations from AI-assisted executive impersonation and invoice fraud
Excerpt
In this article Attack chain overview Email Delivery Domain registration Generative AI usage Mitigation and protection guidance Microsoft Defender detections Microsoft Security Copilot Threat intelligence reports MITRE ATT&CK Techniques observed Indicators of compromise (IOC) Learn More Threat actors are increasingly improving their tactics to make suspicious emails look like legitimate email notifications to potential victims, deploying techniques that impersonate…
Read the original report →Diamond Model
Adversary
Infrastructure(2)
Capability
Victim
Indicators of Compromise
Open the mindmap →12 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| info@lohnsteuerhilfe-aktuell-verein.de | High | Score 58/100 | First seen | |
| info@tivityhealth.com | High | Score 58/100 | First seen | |
| noreply@mctci.com | High | Score 58/100 | First seen | |
| gomez@service-nowinc.com | High | Score 58/100 | First seen | |
| info@lifeones.com | High | Score 58/100 | First seen | |
| no-reply@lumalisboa.com | High | Score 58/100 | First seen | |
| info@nuf.co.jp | High | Score 58/100 | First seen | |
| Domain | service-nowinc.com | High | Score 58/100 | First seen |
| Domain | domainlify.net | High | Score 58/100 | First seen |
| contact@eemusicclass.co.uk | High | Score 58/100 | First seen | |
| info@tovimbatista.pt | High | Score 58/100 | First seen | |
| notifications@uinsure.co.uk | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…