PoisonSeed Campaign Targets CRM and Bulk Email Providers in Supply Chain Spam Operation
A new threat group, dubbed PoisonSeed, is targeting enterprise organizations and individuals outside the cryptocurrency industry. The campaign focuses on phishing CRM and bulk email providers' credentials to export email lists and send bulk spam. The attackers use a cryptocurrency seed phrase poisoning attack, providing security seed phrases to trick victims into compromising their wallets. Similarities have been detected between PoisonSeed, Scattered Spider, and CryptoChameleon, but the campaign is being classified separately due to unique characteristics. The attackers have set up phishing pages for prominent CRM and bulk email companies, including Mailchimp, SendGrid, Hubspot, Mailgun, and Zoho. Once credentials are phished, the process of bulk downloading email lists appears to be automated. The campaign also involves spam sent from compromised accounts, including a notable breach of an Akamai SendGrid account.
Pulse ID: 67f432acbd8d0957264e79a3
Pulse Link: https://otx.alienvault.com/pulse/67f432acbd8d0957264e79a3
Pulse Author: AlienVault
Created: 2025-04-07 20:16:44
Be advised, this data is unverified and should be considered preliminary. Always do further verification.
𓊉 
Artist: 
09/2024 - Title: "Blending In" ("Chameleon") - 
and 
. These beautiful 
With a reimagined logo and beautiful new day and night wallpapers, these designs showcase our iconic 