I’ve seen hundreds of those and they’re mostly phishing attempts. this new one doesn’t look anything like that.

this one has multiple addresses in the CC field, at least one of which is always a predefined list on the senders side. and it’s otherwise a legit looking support ticket response.

but i want to know what’s the origin, what’s the vectors, and what’s the target.