From Social Engineering to DMARC Abuse: TA427’s Art of Information Gathering

To craftily pose as its chosen personas, TA427 uses a few tactics including DMARC abuse in concert with free email addresses, typosquatting, and private email account spoofing.