No items found.
No items found.
Back to All Attacks
Attack Details
Attack Date:
Mar 8, 2022

Employee Impersonation Payroll Diversion BEC Attack

Initial Email Content

Subject
Body

Hi [Recipient Name],

This is to notify you that am having issues with my current bank
account on file, I want to update my new bank account details before
payroll is process.

What details do you need?

Sincerely ,

[Impersonated Employee Name]
[Impersonated Employee Title]

Attack Screenshots

No items found.

Malicious Artifacts

Additional Indicators of Compromise

Type

Description

No items found.

Attack Description

This text-based BEC attack impersonates an employee using display name spoofing and a free webmail account to divert payroll deposits to a fraudulent account.

Analysis Overview

Tactic
Spoofed Display Name
Free Webmail Account
Goal
Payroll Diversion
Impersonated Party
Employee - Other
Vector
Text-based
Theme
No items found.
Language