Tag: rdweb portal

1 Attack Reports | 0 Vulnerabilities

Attack reports

The Devil, Eight Million Emails, and a Whole Lot of Milk | Phishing Stager Exposed

On May 15, 2026, Huntress agents detected an intrusion where threat actors compromised a terminal server to stage a massive phishing campaign rather than deploy ransomware. The attacker used legitimate bulk email software (Gammadyne Mailer) with a project file named 'dracii' (Romanian for 'the devi…

credential theft

phishing campaign

bulk email abuse

compromised government website

payment card harvesting

romanian threat actor

terminal server compromise

Published: June 15, 2026

Downloadable IOCs: 13

Click here to see more Attack Reports