How can we contain a self-propagating Google Workspace phishing campaign using AiTM proxies?
Our enterprise recently dealt with a coordinated campaign in which attackers used adversary-in-the-middle (AiTM) phishing proxies to compromise accounts in legitimate Google Workspace tenants. Compromised mailboxes then appeared…