Image displaying a list of internet IP addresses followed by various domain names, including well-known entities like Amazon AWS and SendGrid. These 21 domains are PoisonSeed Domains Registered Since 1 June 2025.
New research raises questions about PoisonSeed using TTPs similar to SCATTERED SPIDER. The DTI team identified 21 new malicious domains spoofing SendGrid and using fake Cloudflare CAPTCHAs to harvest credentials:
https://bit.ly/46w63on
#ThreatIntel #PoisonSeed #SCATTEREDSPIDER