Hackers distribute thousands of phishing attacks through Mimecast's secure-link feature

A fish hook is lying across a computer keyboard, representing a phishing attack on a computer system.

• Attackers abused Mimecast’s URL‑rewriting feature to mask malicious links in phishing emails
• More than 40,000 emails hit 6,000+ organizations, especially consulting, tech
• Campaign bypassed filters globally, with most victims in the US, though Mimecast says no flaw exists

Cybercriminals are abusing a legitimate Mimecast feature to deliver convincing phishing emails to their victims - at scale.