The Devil, Eight Million Emails, and a Whole Lot of Milk | Phishing Stager Exposed

Reported 15 Jun 2026 by otx · Severity: medium

On May 15, 2026, Huntress agents detected an intrusion where threat actors compromised a terminal server to stage a massive phishing campaign rather than deploy ransomware. The attacker used legitimate bulk email software (Gammadyne Mailer) with a project file named 'dracii' (Rom