Fake Fedex Email Delivers Donuts!, (Fri, Feb 27th)
2026-03-04T21:37:19Z•a28635c7572bcabd67c50bc5576d736470009e8db1d19a0c81ed55d4534a429c
AI-assistanceIOCSANS-ISCcritical-infrastructuree-mail-proxyemail-securityhoneypotmalicious-jpegmalspammsiopen-redirectphishingpodcastthreat-intelligence
What happened
SANS ISC diary entries (Feb 23–27, 2026) covering multiple security topics: a FedEx-themed phishing email that delivered malware via an unexpected payload; campaigns delivering malicious JPEG files that embed payloads (including “MSI image” techniques) caught by email proxies; a discussion on the continued risks and impact of open redirect vulnerabilities; lessons from running a honeypot with AI assistance; a conceptual CLAIR model for mapping critical infrastructure interdependencies; and the regular ISC Stormcast podcasts. No specific CVEs are referenced in these posts.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- a28635c7572bcabd67c50bc5576d736470009e8db1d19a0c81ed55d4534a429c
- Enrichment time
- 2026-03-04T21:37:19Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.