Compromised External Email Account

Legitimate but compromised accounts (e.g., vendors or partners) are used to distribute phishing emails, leveraging existing relationships to lower suspicion.

Mapped to
MITRE ATT&CK®

Connected in PH!SH