IronToll Email delivery of IronToll fake gov traffic-fine phishing links
Detects emails delivering links to IronToll government-impersonation traffic-fine/payment portals (Egyptian and Moroccan justice-ministry lures), correlated with Safe Links click-through telemetry for the same URLs.
Microsoft Sentinel (KQL)
