Back to All Attacks
Attack Details
Attack Date:
May 20, 2022

Executive Impersonation Community Service Gift Card Request BEC Attack

Initial Email Content

Subject
[Target Company Name]
Body

Hello [Recipient First Name],


Are you available? I need your assistance and I've got Credence in you to take care of this. I would have called your phone, I am out of town now for a meeting and I do not have access to my mobile phone. [Target Company Name] needs some gift cards for donation to Community Welfare with patients and Veterans at Hospice Care, can you confirm if you can get some today? I will need you to get 6 pieces x 100 denominations of either Target , Amazon or Best Buy gift cards which totals 600:00 online or at any convenience store near you. 


When you have the physical cards.


(1) Take snapshots to capture the front and back of the gift cards. (Scratch Target)

(2) Attach the pics & send to the Veterans Hospice Palliative Care e-mail address <veterans@anglewingscare.com> and cc me.

The idea is to make the card readable for the Vets can have access to it.


Let me know if you can get this done today. You will be reimbursed guaranteed by me.


Regards,

[Executive Name].

Attack Screenshots

No items found.

Malicious Artifacts

Additional Indicators of Compromise

Type

Description

No items found.

Attack Description

This text-based BEC attack impersonates an executive using a spoofed display name, a free webmail account, and a community service theme to request the purchase of gift cards.

Analysis Overview

Tactic
Spoofed Display Name
Free Webmail Account
Goal
Gift Card Request
Impersonated Party
Employee - Executive
Vector
Text-based
Theme
Community Service
Language