A spear phishing email was detected targeting key personnel to compromise user credentials and gain network access. The email contained a malicious attachment and was sent from an external IP address associated with known threat actor ALPHV.