

In live incidents, SoupDealer bypassed host‐based antivirus checks by confirming no security products were active before proceeding.
That’s a pretty narrow victim demographic. Windows has Defender enabled out of the box. I don’t see any investigation on the C2 connection, either, so I’m left wondering who the attacked and intended targets are.
Having your own domain would solve most of your complaints about email. It’s valid, controlled by you, filtered for spam however you desire, and you can have as many addresses on that domain as you want, without aliasing, and they’ll still all go to you.