Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
6 IOCs
When Business Email Compromise Starts Rewriting Reality
Excerpt
Business Email Compromise (BEC) operates on a familiar playbook. Threat actors breach a mailbox, silently monitor operations, map approval chains, and ultimately exploit that access to divert funds or exfiltrate sensitive assets. This dynamic is central to our analysis as we kick off a series around Rapid7's collaborative research with Zimbra; upcoming installments will explore technical details and broader findings based within the Zimbra Collaboration Suite. Our…
Read the original report →Indicators of Compromise
Open the mindmap →6 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2025-27915 | Medium | Score 54/100 | First seen |
| CVE | CVE-2023-37580 | Medium | Score 51/100 | First seen |
| CVE | CVE-2022-27925 | Medium | Score 53/100 | First seen |
| CVE | CVE-2024-45519 | Medium | Score 51/100 | First seen |
| CVE | CVE-2022-37042 | Medium | Score 51/100 | First seen |
| CVE | CVE-2026-73570 | High | Score 74/100 | First seen |
IOC Relationship Graph
Building graph…