Security56 mOctober 22, 2026, 17:59

Cisco Talos: attackers abuse legitimate platforms to deliver phishing emails

Cisco Talos found attackers abusing more than 25 legitimate platforms as delivery couriers for phishing. In two campaigns totaling about 1,400 messages, fake support numbers were planted in billing and shipping fields of Dell and Staples transactional emails to trigger callback scams.

Help Net Security

Open source

Cisco Talos: attackers abuse legitimate platforms to deliver phishing emails

Attack bypasses SPF, DKIM and DMARC because the mail is genuinely sent by Dell or Staples
A $736.09 order confirmation carried a fake support number in the Ship To field
Attackers also use list bombing and bounced-email notices carrying file-sharing lures
Talos advises platforms to validate user-controlled fields and gateways to inspect rendered mail

#Cisco#Dell#Staples

Cisco Talos finds CLOSEDQUORUM malware where four AI models vote on its next move

Security

Cisco FMC CVE-2026-20079: CVSS 10.0 auth bypass exploited in the wild

Security

Cisco Talos: Two FMC Flaws Exploited by Three Threat Clusters

Security

Cisco Talos: attackers abuse legitimate platforms to deliver phishing emails

Cisco Talos finds CLOSEDQUORUM malware where four AI models vote on its next move

Cisco FMC CVE-2026-20079: CVSS 10.0 auth bypass exploited in the wild

Cisco Talos: Two FMC Flaws Exploited by Three Threat Clusters

Cisco Talos Launches CAIRN Framework to Classify AI-Driven Malware