Executive Impersonation Payroll Diversion BEC Attack

Initial Email Content

Subject

Re:

Body

Hi,

I had some trouble with my debit card last week, so I switched my direct deposit details to my new bank with a better interest rate. I was supposed to do it last week, but I am all set now. I want this week's pay to go into my new bank account. Can I send it over to you directly to have it updated? Also what date would this be effective for? Please advise.

Regards,

[Executive First Name]

Attack Screenshots

No items found.

Malicious Artifacts

Additional Indicators of Compromise

Type

Description

No items found.

Attack Description

This text-based BEC attack impersonates an executive using a spoofed display name and a free webmail account to divert payroll deposits to a fraudulent account.

Analysis Overview

Type

Business Email Compromise

Tactic

Spoofed Display Name

Free Webmail Account

Goal

Payroll Diversion

Impersonated Party

Employee - Executive

Vector

Text-based

Theme

No items found.

Language