There is a targeted phishing campaign happening right now involving the
@Foundation email domain. Messages are being sent to a large number of addresses that have appeared in data breaches urging people to migrate funds from their devices.
Obviously this is a scam, and thereβs no indication that Foundationβs own data was leaked, but the question I want an answer to is how were these attackers able to spoof the email headers to allow these emails to appear legitimate?
