Vendor
ActiveCampaign
- First Reported
- Sep 5, 2026
- Latest Reported
- Oct 21, 2026
Reported Context (2)
- 2025, a package called postmark-mcp appeared on npm, impersonating the official MCP server that ActiveCampaign maintains for the Postmark email service. Its job was to let an AI assistant send email through your Software Supply Chain Security Best Practices for 2026
- The campaign is tied to finance-themed sender domains and ActiveCampaign infrastructure, and it shows how AI-era evasion tactics can be reused in traditional phishing operations. Microsoft Reports Phishing Campaign Using Invisible Unicode to Evade Email Filters
Threat Actors (2)
MITRE ATT&CK (7)
Vendors (5)
Products (10)
Tools (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.