Back to All Attacks
Attack Details
Attack Date:
Jun 22, 2022

Employee Impersonation Employee Incentive Gift Card Request BEC Attack

Initial Email Content

Subject
Surprise Incentive
Body

[Recipient First Name],


How are you doing today, before this skip my mind today i think i will like to appreciate some of the staff with little incentive today, so i will like you to perform little task for me soon, let me know if you are available so that i can send you details.


Regards,


[Impersonated Employee Name]

Attack Screenshots

No items found.

Malicious Artifacts

Additional Indicators of Compromise

Type

Description

No items found.

Attack Description

This text-based BEC attack impersonates an employee using a maliciously registered domain, a spoofed display name, and an employee incentive theme to request the purchase of gift cards.

Analysis Overview

Tactic
Maliciously Registered Domain
Spoofed Display Name
Goal
Gift Card Request
Impersonated Party
Employee - Other
Vector
Text-based
Theme
Employee Incentive
Language