[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fv24VL7sVRBE9TXojvaFED3zyeVsYZfigCgfKObXVqAA":3},{"article":4,"iocs":36,"watch_terms":44,"solutions":45,"lesson":10},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":13,"relevance_score":14,"entities":15,"category_id":16,"category":17,"article_tags":20},"717f8264-0c97-4496-bf21-9a3c57465740","Security Firm Executive Targeted in Sophisticated Phishing Attack","security-firm-executive-targeted-in-sophisticated-phishing-attack","The attackers used a DKIM-signed phishing email, trusted redirect infrastructure, compromised servers, and Cloudflare-protected phishing pages. The post Security Firm Executive Targeted in Sophisticated Phishing Attack appeared first on SecurityWeek.","A C-level executive at Swedish security firm Outpost24 was targeted in a sophisticated phishing attack using the Kratos phishing-as-a-service kit. The attack employed a seven-step infrastructure chain leveraging DKIM spoofing, trusted services (Cisco, Nylas, Cloudflare), and a compromised Indian development company domain to bypass email security controls and harvest Microsoft 365 credentials.",null,"https:\u002F\u002Fwww.securityweek.com\u002Fsecurity-firm-executive-targeted-in-sophisticated-phishing-attack\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2025\u002F11\u002FAI-phishing.jpeg","2026-03-16T15:00:05.512592+00:00",8,[],"2c8f44d4-b56e-47cf-9677-04f22c9ee78d",{"id":16,"icon":10,"name":18,"slug":19},"Identity & Access","identity-access",[21,26,31],{"category":22},{"id":23,"icon":10,"name":24,"slug":25},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":27},{"id":28,"icon":10,"name":29,"slug":30},"c5eccf7c-abbc-4bd3-bbed-e6da5cba8e73","Incident Response","incident-response",{"category":32},{"id":33,"icon":10,"name":34,"slug":35},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[37,40],{"type":25,"value":38,"context":39},"Kratos","Phishing-as-a-service kit used in the attack against Outpost24 executive",{"type":41,"value":42,"context":43},"domain","secure-web.cisco.com","Legitimate Cisco URL rewriting service abused as redirect infrastructure in phishing chain",[],{"controls":46,"vendors":132},[47,76,103],{"slug":48,"name":49,"problem":50,"products":51},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",[52,60,68],{"vendor_slug":53,"vendor_name":54,"vendor_logo":55,"product_slug":56,"product_name":57,"url":58,"description":59},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"vendor_slug":61,"vendor_name":62,"vendor_logo":63,"product_slug":64,"product_name":65,"url":66,"description":67},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","duo","Cisco Duo","https:\u002F\u002Fduo.com\u002F","MFA and device trust, with support for passkeys and security keys.",{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"yubico","Yubico","\u002Fvendor-logos\u002Fyubico.png","yubikey","YubiKey","https:\u002F\u002Fwww.yubico.com\u002Fproducts\u002F","Hardware security keys for FIDO2, passkeys and smart card login, in USB and NFC versions.",{"slug":77,"name":78,"problem":79,"products":80},"email-authentication","Email authentication (DMARC)","Nobody can send email that pretends to come from your domain.",[81,89,95],{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":85,"product_name":86,"url":87,"description":88},"red-sift","Red Sift","\u002Fvendor-logos\u002Fred-sift.png","ondmarc","Red Sift OnDMARC","https:\u002F\u002Fredsift.com\u002Fpulse-platform\u002Fondmarc","Guided DMARC deployment and monitoring, with support for BIMI and MTA-STS.",{"vendor_slug":90,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":90,"url":93,"description":94},"dmarcian","\u002Fvendor-logos\u002Fdmarcian.png","dmarcian-platform","https:\u002F\u002Fdmarcian.com\u002F","DMARC report processing and guidance for moving domains to enforcement.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"valimail","Valimail","\u002Fvendor-logos\u002Fvalimail.png","valimail-enforce","Valimail Enforce","https:\u002F\u002Fwww.valimail.com\u002Fproducts\u002Fenforce\u002F","Automated DMARC enforcement with discovery of every service that sends mail as your domain.",{"slug":104,"name":105,"problem":106,"products":107},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",[108,116,124],{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-office-365","Microsoft Defender for Office 365","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-office-365","Protection for Exchange Online, Teams and SharePoint against phishing, malicious links and attachments.",{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"mimecast","Mimecast","\u002Fvendor-logos\u002Fmimecast.png","mimecast-email-security","Mimecast Email Security","https:\u002F\u002Fwww.mimecast.com\u002Fproducts\u002Femail-security\u002F","Email filtering, impersonation protection and continuity.",{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":128,"product_name":129,"url":130,"description":131},"check-point","Check Point","\u002Fvendor-logos\u002Fcheck-point.png","harmony-email","Harmony Email & Collaboration","https:\u002F\u002Fwww.checkpoint.com\u002Fharmony\u002Femail-security\u002F","Email and collaboration security for Microsoft 365 and Google Workspace.",[133],{"slug":134,"name":135,"logo_path":136,"roles":137},"outpost24","Outpost24","\u002Fvendor-logos\u002Foutpost24.png",[138],"affected"]