The root cause is a modifiable email routing configuration feature on Proofpoint servers, allowing unauthorized relay of organizations' outbound messages without specifying restrictions.
Guardio Labs estimated that cyber criminals could have sent an approximate average of three million phishing emails daily, with record numbers hitting 14 million.
Fake emails sent during the phishing campaign were effectively signed, utilizing legitimate SPF and DKIM signatures from big-name clients like Disney and Coca-Cola.
Proofpoint's platform was labeled as the enabler of the phishing campaign, with malicious emails sent from Proofpoint servers directly to target customers.
Collection
[
|
...
]