Back to All Attacks
Attack Details
Attack Date:
May 15, 2022
Employee Impersonation Employee Incentive Gift Card Request BEC Attack
Initial Email Content
Subject
INTERNAL MEMO
Body
Good Morning [Recipient First Name] ,
I trust you are doing very well. I'm looking forward to surprising some staff with Gifts and other incentives for their hard work and dedication. What do you suggest we surprise them with? We have other plans in place to ensure workflow and efficiency. Email me once you receive this.
[Impersonated Employee Name]
[Impersonated Employee Title]
sent from my mobile device.
Attack Screenshots
No items found.
No items found.
Malicious Artifacts
Additional Indicators of Compromise
Type
Description
No items found.
Attack Description
This text-based BEC attack impersonates an employee using a spoofed display name, a free webmail account, and an employee incentive theme to request the purchase of gift cards.
Analysis Overview
Tactic
Spoofed Display Name
Free Webmail Account
Goal
Gift Card Request
Impersonated Party
Employee - Other
Vector
Text-based
Theme
Employee Incentive
Language