Todyl’s MXDR team recently detected and shut down a sophisticated phishing campaign that exploited the end-of-year open enrollment window to target organizations with highly credible fake benefits emails. Here's how it unfolded, how we caught it, and what it means for your security posture.