Executive Impersonation Payroll Diversion BEC Attack

Initial Email Content

Subject

Changing The P-Stub..

Body

Hello, good morning.

I need your help in updating my (Direct Deposit) details. Can I just send a voided check? My payroll portal isn't working,

Wishing you a wonderful day.

Sincerely, regards.

[Executive Name]

[Executive Title]

Attack Screenshots

No items found.

Malicious Artifacts

Additional Indicators of Compromise

Type

Description

No items found.

Attack Description

This text-based BEC attack impersonates an executive using a spoofed display name and a free webmail account to divert payroll deposits to a fraudulent account.

Analysis Overview

Type

Business Email Compromise

Tactic

Spoofed Display Name

Free Webmail Account

Goal

Payroll Diversion

Impersonated Party

Employee - Executive

Vector

Text-based

Theme

No items found.

Language