The Funding Approval That Passed Every Authentication Check
TL;DR The attacker registered a domain one character off from a legitimate commercial lender (extra 's' in the company name), configured it as a sending identity in Salesforce Marketing Cloud...
Read more