Back to All Attacks
Attack Details
Attack Date:
Jun 29, 2022

Executive Impersonation Employee Incentive Gift Card Request BEC Attack

Initial Email Content

Subject
routine ­­staff appreciation
Body

Good Morning [Recipient First Name],

­­

I trust you are doing very well. I'm looking forward to surprising some staff with Gifts for their hard work and dedication. What do you suggest we surprise them with? Email me once you receive this.



[Executive Name]

[Executive Title]

sent from my mobile device

Attack Screenshots

No items found.

Malicious Artifacts

Additional Indicators of Compromise

Type

Description

No items found.

Attack Description

This text-based BEC attack impersonates an executive using a spoofed display name, a free webmail account, and an employee incentive theme to request the purchase of gift cards.

Analysis Overview

Tactic
Spoofed Display Name
Free Webmail Account
Goal
Gift Card Request
Impersonated Party
Employee - Executive
Vector
Text-based
Theme
Employee Incentive
Language