Voicemail-themed phishing burst: 'New VM Received' mass send

Arnold Chan@slaz

•updated Sep 19, 2026•0•0•0

This rule detects high-volume, burst-pattern email distribution associated with a 'New VM Received' subject line, originating from non-authorized or non-corporate domains. This behavior is indicative of potential mass phishing or spam campaigns mimicking automated voicemail notifications.