Executive Impersonation Holiday Gift Gift Card BEC Attack
Initial Email Content
Hi [Recipient Name],
I’m planning to surprise some of the employees with Easter gift for their hard work, and your confidentiality would be appreciated so as not to ruin the surprise. I want you to make a purchase quickly on my behalf. What local store do you think we have around to make this purchase? I'm considering gift cards like Visa or Amex gift cards. Since we have them almost everywhere, let me know what you suggest about this plan before purchasing.
Kind Regards,
[Impersonated Executive Name]
[Impersonated Executive Title]
[Impersonated Executive Company]
Sent from my mobile device
Attack Screenshots
Malicious Artifacts
Additional Indicators of Compromise
Type
Description
Attack Description
This text-based BEC attack impersonates an executive using display name spoofing, a free webmail account, and a holiday gift theme to request the purchase of gift cards.