cmcpgh

MXLogic is a spam filtering system - I've used it with clients before. It will filter and then re-send emails to whatever system you choose. The email isn't "hosted" at MXLogic unless you tell it to archive email for you. Its typical config is to block spam/viruses and send along.

If we combine the Check Point firewall job posted on the Anthem Inc's website on 1/30/2015, add in the "discovery" on 1/29/2015, and think about Check Point's vulnerability to Heartbleed and Shellshock last year, one might also guess that a VPN stolen-credential compromise (like the major CHS breach last year) or a generic firewall compromise (via shellshock) are in the running as possibilities.

Anyone had any luck figuring out how to get a $i to have an arbitrary string? About to look into the ajax code for a json string which, deserialized, lands an extra array level in the $args. Deserialization seems to be the best guess about what Stefan Horst has in his POC, and the way to make it this way: "if the array has keys, which are no integers."