PoisonSeed: supply-chain phish, seed-phrase theft, MFA bypass

Your email/CRM got “verified,” congrats — so did PoisonSeed. They borrow your good reputation, waltz past MFA with an AitM proxy, and sprinkle “seed phrases” that only grow losses. Marketing, IT, and crypto-adjacent users are the jackpot. 🔐😏

Two tells: NiceNIC look-alike domains and sudden list-export/API-key sprees in Mailchimp/SendGrid. If DKIM passes and your brand voice doesn’t, you’re the supply chain.

What’s your weakest link: legacy MFA, sloppy export controls, or “we’ll train them next quarter”? Be honest — then fix it.

Read the breakdown and swipe our quick wins → https://blog.alphahunt.io/poisonseed-supply-chain-phish-seed-phrase-theft-mfa-bypass
Subscribe for the full detections + IR playbook.

#AlphaHunt #CyberSecurity #ThreatIntel #Phishing #MFA

Did you learn something new?