A scammer registered a typosquatting domain mimicking my employer's and started sending out emails impersonating our head recruiter, offering people fake job interviews / jobs.
After a lot of effort we managed to get the domain suspended, and the scammer moved on to another domain.
I'm thinking about what to put as the "root cause" in the post-mortem for this incident.
#infosec #breach #postMortem