Compromised Internal Email Account
The message came from a real mailbox in your own organization that an attacker had taken over or misused. A colleague's genuine account can pass the checks that confirm who sent a message, and is easy to trust.
Also known as
- Aliases
-
- hacked email account
- email account compromise (EAC)
- Internal Spearphishing
- Broader terms
-
- account takeover (ATO)
- Compromise Accounts: Email Accounts
Mapped to
MITRE ATT&CK®