Latin-Placeholder PDF Phishing - SCL≥5 SPF Softfail DMARC Fail with PDF Attachment

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•0

Detects inbound emails associated with the Latin-placeholder PDF phishing campaign. The detection triggers based on a high spam confidence level (SCL >= 5), a spam verdict, authentication failures (SPF softfail/fail and DMARC fail), and the presence of a PDF attachment.