HACKERS TARGET CYBERSECURITY FIRM OUTPOST24 IN 7-STAGE PHISH

Summary from the TLDR InfoSec newsletter

Attackers sent a JPMorgan-themed phishing email to an Outpost24 executive that passed DKIM checks and existing email security controls. The link chained through Cisco Secure Web, Nylas tracking, a compromised Indian firm, an expired-reused domain, and a Cloudflare-hosted site before a Microsoft 365 credential page.