First-Time External Sender with Voicemail Lure Targeting Finance Exec Mailbox Off-Hours

Ibrahim Saud@tektrix

•updated Jun 23, 2026•0•0•3

Detects first-time external sender domains delivering multiple voicemail-themed or financial urgency emails to the same recipient during off-hours (midnight-06:00 UTC), consistent with Scotiabank TOAD callback phishing targeting CFO/finance executives.