Hubspot, and others. They harvest people’s login credentials, which allow cybercriminals to log into mailing service accounts and exfiltrate any mailing lists. Then they would send emails ...

The crooks would either send a Docusign-enabled PDF file ... Besides using custom phishing lures, with organization-specific branding and email formats, the crooks also went for targeted ...