Back to All Attacks
Attack Details
Attack Date:
May 19, 2022
Employee Impersonation New Vendor Payment Fraud BEC Attack
Initial Email Content
Subject
Thursday 19th May, 2022. Vendor's Payment
Body
Hi [Recipient First Name],
I'd need you to process payment of $1,910 to a vendor and it's imperative the payment goes out today. Let me know if you are available so I can send further instructions.
Thanks.
Attack Screenshots
No items found.
No items found.
Malicious Artifacts
Additional Indicators of Compromise
Type
Description
No items found.
Attack Description
This text-based BEC attack impersonates an employee using a spoofed email address, a free webmail account, and a new vendor theme to request a fraudulent payment.
Analysis Overview
Tactic
Spoofed Email Address
Free Webmail Account
Goal
Payment Fraud
Impersonated Party
Employee - Other
Vector
Text-based
Theme
New Vendor
Language