Phishing attack uses compromised SendGrid accounts to target additional users

Attackers have compromised SendGrid accounts to launch phishing attacks against other SendGrid customers. The phishing emails mask the malicious links using SendGrid's click-tracking feature. The phishing pages validate credentials and 2FA codes in real-time, making it harder for users to detect the fake pages.