Executive Impersonation Legal Matter Payment Fraud BEC Attack

Initial Email Content

Subject

Project Vida - Legal Matter

Body

[Recipient First Name],

‍

We have engaged King & Spalding LLP to represent us in Project Vida which involves the acquisition of certain distressed assets. I need you to work with Daniel Crosby, the partner in charge, to resolve a time-sensitive matter by the close of business this week.

‍

Please let me know soonest by email when you are available later today and the best number to reach you at.

‍

Thanks.

[Executive Name]

Sent from my iPhone

‍

Attack Screenshots

No items found.

Malicious Artifacts

Additional Indicators of Compromise

Type

Description

No items found.

Attack Description

This text-based BEC attack impersonates an executive using display name spoofing, a maliciously registered domain, and a legal matter theme to request a fraudulent payment.

Analysis Overview

Type

Business Email Compromise

Tactic

Spoofed Display Name

Maliciously Registered Domain

Goal

Payment Fraud

Impersonated Party

Employee - Executive

Vector

Text-based

Theme

Legal Matter

Language