Phishing-as-a-service — what we saw in Q1 2025
Three waves, three vectors. Why DMARC alone is not enough and which two banner rules carry most of the load.
What it is about
Three waves, three vectors. Why DMARC alone is not enough and which two banner rules carry most of the load.
What we did
Three steps in practice. Discovery, pilot, hand-over. We document every action inside the tenant instance — no shadow log, no vendor stuff.
What you can take with you
Write to us if you want templates or scripts from this engagement. We share what we are allowed to share.