Skip to content

Conversation

@brycampbell
Copy link
Member

https://platform.sublime.security/messages/4fb2c852c5dce251d3abf8e3a83c80ce493f44329818b5a8601f2cfaa1686d8a?preview_id=019a6e61-4497-766a-86bd-44bf26c1b59b

Looks like its either abused/spoofed here, but hopefully this is covered.

Interactive canonical here: 9d215b0f-6e51-4ee2-b109-5a9ed0638b41 leading to a tycoon phish

@brycampbell brycampbell added the help wanted Extra attention is needed label Nov 11, 2025
Copy link
Member

@aidenmitchell aidenmitchell left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm not sure this is correct, I don't see any of these links in the sample.

@brycampbell
Copy link
Member Author

So either its spoofed in the signature block of that sample, is that not sufficient to include it as a potential bulk mailer?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

help wanted Extra attention is needed

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants