PoisonSeed is a financially motivated eCrime threat actor that emerged in early 2025, specializing in advanced credential theft and cryptocurrency scams. This group distinguishes itself through the use of sophisticated, MFA-resistant phishing kits and a novel 'seed phrase poisoning' technique to compromise cryptocurrency wallets. They primarily target bulk email and CRM providers to execute large-scale supply chain phishing attacks, enabling them to leverage compromised infrastructure for their campaigns. While often operating with similar infrastructure patterns to groups like Scattered Spider and CryptoChameleon, PoisonSeed is classified as a distinct entity within the broader 'The Com' collective due to unique operational behaviors and phishing kit codebases.