Back to All Attacks
Attack Details
Attack Date:
May 5, 2022
Employee Impersonation Payroll Diversion BEC Attack
Initial Email Content
Subject
Modify Adjure
Body
Hello,
I would like to inform you that my current bank details on my profile has been closed due to some personal reason, so am getting a replacement for it which i want to have it updated for my next Paychex.
Thank you,
[Impersonated Employee First Name]
Attack Screenshots
No items found.
No items found.
Malicious Artifacts
Additional Indicators of Compromise
Type
Description
No items found.
Attack Description
This text-based BEC attack impersonates an employee using display name spoofing and a free webmail account to divert payroll deposits to a fraudulent account.
Analysis Overview
Tactic
Spoofed Display Name
Free Webmail Account
Goal
Payroll Diversion
Impersonated Party
Employee - Other
Vector
Text-based
Theme
No items found.
Language