The Devil, Eight Million Emails, and a Whole Lot of Milk

A Romanian threat actor hijacked a company's terminal server to launch a massive phishing campaign—targeting nearly nine million emails with a fake Boots UK survey and harvesting personal and payment data via a payload hosted on a compromised Bolivian government website—while cleverly evading detection by abusing legitimate bulk mail software and direct-to-MX delivery.