Scotiabank TOAD Spearphishing - VIP Mailbox Financial Urgency Lure
Detects inbound spearphishing emails impersonating Scotiabank with Interac e-Transfer financial urgency lures targeting executive/VIP mailboxes from first-time external senders, with multiple variants delivered within one hour.
Microsoft Sentinel (KQL)

