SendGrid

Reported Context (2)

The email delivery path additionally shows routing through SendGrid’s outbound infrastructure, indicating the use of a legitimate third-party email delivery service for improved delivery reliability and reduced CYFIRMA Details Tax-Themed Phishing Campaign Delivering In-Memory Malware
The actors employed PDF download links, SendGrid-distributed attachments, geofencing checks, multi-stage payload delivery, and a Phantom Persistence technique to evade detection and maintain persistence. Silver Fox Uses Modified RustSL to Deliver ValleyRAT and ABCDoor

Malware (3)

Threat Actors (1)

MITRE ATT&CK (21)

Products (5)

Tools (6)

Industries (5)

Countries (6)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.