Skip to main content
AdvisorySeverity: Not rated

Credential Theft Campaign Advisory

A coordinated phishing campaign is targeting enterprise and government mail accounts through cloned sign-in portals and malicious attachments.

NC4 has observed increased phishing activity targeting institutional credentials across public and private sector mail domains.

Organizations are advised to enforce MFA, block suspicious domains, and activate conditional access policies for external sign-ins.

Users should verify sender domains, avoid opening untrusted attachments, and report suspicious communications immediately.

      Think you have been affected?

      Report the incident to NC4. We can help with containment, investigation and recovery, and your report helps us warn others.
      Return focus to the top of the page