Boring business enquiries want your credentials.

A highly generic phishing campaign masquerading as routine sales leads has been detected targeting local organisations.

A "low and slow" phishing campaign using the subject "business enquiry" is currently circulating. Unlike high-pressure scams, this lure targets sales and administrative teams by mimicking a mundane business lead to bypass human suspicion and technical filters. Staff are urged to treat unexpected sales attachments or links with extreme caution.

Source: Decision1 Internal Intelligence

Email authorisation

SPF

Pass

DKIM

Pass

DMARC

None

COMPAUTH

Fail

Sender Domain Intelligence

What's this?

The domain the message claims to be from. Fresh registrations and known-bad reputations are the strongest technical tells of a spoofed sender.

Sender domainsivelga.com

Age1663 daysEstablished

Email Sample

Open full size ↗

Source

Decision1