Followup in case anyone sees: turns out OP was correct, a french language Linkedin post that details the exploit: https://www.linkedin.com/posts/christophe-dary

Followup in case anyone sees: turns out OP was correct, a french language Linkedin post that details the exploit: https://www.linkedin.com/posts/christophe-dary-85330561_spf-dmarc-bimi-activity-7070510499196489728-pPTh https://www.linkedin.com/posts/christophe-dary-85330561_spf-...