{"success":true,"data":{"id":"fake-big4-audit-report-pdf-phish","label":"Fake Big 4 / McKinsey audit report PDF phishing — impersonates PwC, Deloitte, EY, KPMG, or McKinsey sending a \"confidential audit findings\" PDF from a non-official domain; PDF is a malware dropper or credential-harvest portal link. Proofpoint 2026; Cofense Big4-impersonation campaign Q1 2026.","description":"Phishing emails impersonating Big 4 accounting firms (PwC, Deloitte, EY, KPMG) or top management consultancies (McKinsey, Bain, BCG) sending \"confidential audit findings\" with a malicious PDF attachment or portal link, from non-official domains. Three-part detection: (1) Big 4 / McKinsey brand mention, (2) confidential audit / board attention / management letter language, (3) PDF attachment, sender NOT on official firm domain, no List-Unsubscribe. Proofpoint 2026; Cofense Big4-impersonation campaign Q1 2026. CFO / board-level social engineering.","tier":"danger","category":"phishing","isThin":false}}