The Abnormal Attack Vault

Uncover the latest attacks sent to our Abnormal customers.
Employee Impersonation Payroll Diversion BEC Attack
Subject: “Information on a pay change”

This text-based BEC attack impersonates an employee using a spoofed display name and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: June 22, 2022
See Attack Details
Fake Document Link-based Malware Attack
Subject: “Re: AMENDED SALE AGREEMENT”

This link-based attack impersonates an employee using a hijacked email thread, an external compromised account, a spoofed display name, and a fake document theme to deliver malware.

Attack Date: June 22, 2022
See Attack Details
Employee Impersonation Employee Incentive Gift Card Request BEC Attack
Subject: “Surprise Incentive”

This text-based BEC attack impersonates an employee using a maliciously registered domain, a spoofed display name, and an employee incentive theme to request the purchase of gift cards.

Attack Date: June 22, 2022
See Attack Details
Employee Impersonation Payroll Diversion BEC Attack
Subject: “My Direct Deposit Guide”

This text-based BEC attack impersonates an employee using a spoofed email address and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: June 22, 2022
See Attack Details
Employee Impersonation Payroll Diversion BEC Attack
Subject: “earnings”

This text-based BEC attack impersonates an employee using a maliciously registered domain and a spoofed display name to divert payroll deposits to a fraudulent account.

Attack Date: June 20, 2022
See Attack Details
Spanish Employee Impersonation Payroll Diversion BEC Attack
Subject: “[no subject]”

This text-based Spanish-language BEC attack impersonates an employee using a spoofed display name and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: June 15, 2022
See Attack Details
Employee Impersonation Payroll Diversion BEC Attack
Subject: “[no subject]”

This text-based BEC attack impersonates an employee using a spoofed display name and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: June 14, 2022
See Attack Details
Italian Employee Impersonation Payroll Diversion BEC Attack
Subject: “conto buste paga aggiornato”

This text-based Italian-language BEC attack impersonates an employee using a spoofed display name and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: June 13, 2022
See Attack Details
German Employee Impersonation Payroll Diversion BEC Attack
Subject: “Lohnkonto aktualisiert”

This text-based German-language BEC attack impersonates an employee using a spoofed display name and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: June 6, 2022
See Attack Details
Employee Impersonation Gift Card Request BEC Attack
Subject: “AυαiIαbIe”

This text-based BEC attack impersonates an employee using a foreign character substitution, a WhatsApp number request, a spoofed display name, and a free webmail account to request the purchase of gift cards.

Attack Date: May 30, 2022
See Attack Details
Dutch Employee Impersonation Payroll Diversion BEC Attack
Subject: “Wijziging van salczarisgegevens”

This text-based Dutch-language BEC attack impersonates an employee using a spoofed display name and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: May 23, 2022
See Attack Details
Dutch Employee Impersonation Payroll Diversion BEC Attack
Subject: “Wijziging van gegevens”

This text-based Dutch-language BEC attack impersonates an employee using a spoofed display name and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: May 20, 2022
See Attack Details
Employee Impersonation Payroll Diversion BEC Attack
Subject: “DD Update [Impersonated Employee Name]”

This text-based BEC attack impersonates an employee using a spoofed email address, a personalized email subject, and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: May 19, 2022
See Attack Details
Employee Impersonation New Vendor Payment Fraud BEC Attack
Subject: “Thursday 19th May, 2022. Vendor's Payment”

This text-based BEC attack impersonates an employee using a spoofed email address, a free webmail account, and a new vendor theme to request a fraudulent payment.

Attack Date: May 19, 2022
See Attack Details
Employee Impersonation Payment Fraud BEC Attack
Subject: “Operating Expenses”

This text-based BEC attack impersonates an employee using a spoofed display name and a free webmail account to request a fraudulent payment.

Attack Date: May 18, 2022
See Attack Details
OneDrive COVID-19 Employee Incentive Fake Document Credential Phishing Attack
Subject: “Updated May salary review (Final Post-Covid-19 listing)”

This link-based attack impersonates OneDrive and an employee using a self-addressed spoofed email, a COVID-19 theme, an employee incentive theme, and a fake document theme to steal credentials.

Attack Date: April 18, 2022
See Attack Details
Employee Impersonation Payroll Diversion BEC Attack
Subject: “(no subject)”

This text-based BEC attack impersonates an employee using a spoofed display name and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: May 17, 2022
See Attack Details
Employee Impersonation Payroll Diversion BEC Attack
Subject: “Stub”

This text-based BEC attack impersonates an employee using a spoofed display name and a maliciously registered domain to divert payroll deposits to a fraudulent account.

Attack Date: May 17, 2022
See Attack Details
Employee Impersonation Payroll Diversion BEC Attack
Subject: “Hello [Recipient Name]”

This text-based BEC attack impersonates an employee using an extended spoofed display name, a matching malicious domain username, a personalized email subject, and a maliciously registered domain to divert payroll deposits to a fraudulent account.

Attack Date: May 16, 2022
See Attack Details
Employee Impersonation Employee Incentive Gift Card Request BEC Attack
Subject: “INTERNAL MEMO”

This text-based BEC attack impersonates an employee using a spoofed display name, a free webmail account, and an employee incentive theme to request the purchase of gift cards.

Attack Date: May 15, 2022
See Attack Details
Employee Impersonation Community Service Gift Card Request BEC Attack
Subject: “Community Giving”

This text-based BEC attack impersonates an employee using a spoofed email address, a free webmail account, and a community service theme to request the purchase of gift cards.

Attack Date: May 12, 2022
See Attack Details
Employee Impersonation Payroll Diversion BEC Attack
Subject: “Update Payment Information”

This text-based BEC attack impersonates an employee using an external compromised account to divert payroll deposits to a fraudulent account.

Attack Date: May 2, 2022
See Attack Details
Employee Impersonation Payroll Diversion BEC Attack
Subject: “Change My Details - [Impersonated Employee Name]”

This text-based BEC attack impersonates an employee using a personalized email subject, a spoofed display name, and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: May 11, 2022
See Attack Details
Dutch Employee Impersonation Payroll Diversion BEC Attack
Subject: “Salarisrekening bijgewerkt”

This text-based Dutch-language BEC attack impersonates an employee using a spoofed display name and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: May 10, 2022
See Attack Details
Spanish Employee Impersonation Payroll Diversion BEC Attack
Subject: “Cuenta de nómina actualizada”

This text-based Spanish-language BEC attack impersonates an employee using a spoofed display name and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: May 10, 2022
See Attack Details
Employee Impersonation Payroll Diversion BEC Attack
Subject: “New Direct Deposit Update”

This text-based BEC attack impersonates an employee using a spoofed email address and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: May 9, 2022
See Attack Details
Employee Impersonation Payroll Diversion BEC Attack
Subject: “Account Information Changed”

This text-based BEC attack impersonates an employee using a spoofed email address and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: May 6, 2022
See Attack Details
German Employee Impersonation Payroll Diversion BEC Attack
Subject: “DIREKTES EINZAHLUNGS-UPDATE”

This text-based German-language BEC attack impersonates an employee using display name spoofing and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: May 6, 2022
See Attack Details
Employee Impersonation Gift Card BEC Attack
Subject: “PLEA”

This text-based BEC attack impersonates an employee using display name spoofing and a free webmail account to request the purchase of gift cards.

Attack Date: May 5, 2022
See Attack Details
Employee Impersonation Payroll Diversion BEC Attack
Subject: “Modify Adjure”

This text-based BEC attack impersonates an employee using display name spoofing and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: May 5, 2022
See Attack Details
Employee Impersonation New Vendor Payment Fraud BEC Attack
Subject: “Check for a new vendor”

This text-based BEC attack impersonates an employee using display name spoofing, a free webmail account, and a new vendor theme to request a fraudulent payment.

Attack Date: May 5, 2022
See Attack Details
Employee Impersonation Aging Report BEC Attack
Subject: “Aged Creditors”

This text-based BEC attack impersonates an employee using display name spoofing and a maliciously registered domain to request a copy of an aging report.

Attack Date: March 28, 2022
See Attack Details
Employee Impersonation Payroll Diversion BEC Attack
Subject: “[Recipient Company Name]”

This text-based BEC attack impersonates an employee using a personalized email subject, display name spoofing, and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: May 4, 2022
See Attack Details
Employee Impersonation Payment Fraud BEC Attack
Subject: “[Recipient First Name]”

This text-based BEC attack impersonates an employee using a personalized email subject, display name spoofing, and a free webmail account to request a fraudulent payment.

Attack Date: May 3, 2022
See Attack Details
Employee Impersonation Payroll Diversion BEC Attack
Subject: “[Impersonated Employee Last Name] 03/05”

This text-based BEC attack impersonates an employee using a personalized email subject, display name spoofing, and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: May 3, 2022
See Attack Details
Employee Impersonation Payroll Diversion BEC Attack

This text-based BEC attack impersonates an employee using display name spoofing and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: March 8, 2022
See Attack Details
Employee Impersonation Payroll Diversion BEC Attack
Subject: “Direct Deposit Update”

This text-based BEC attack impersonates a non-executive employee using display name spoofing and a maliciously registered domain to divert payroll deposits to a fraudulent account.

Attack Date: April 19, 2022
See Attack Details
Employee Impersonation Payroll Diversion BEC Attack
Subject: “NEW FINANCIAL INSTITUTION INFORMATION UPDATE”

This text-based BEC attack impersonates a non-executive employee using display name spoofing and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: April 13, 2022
See Attack Details

Filters

Attack Vector

Attack Goal

Attack Tactic

Impersonated Party

Attack Type

Theme

Impersonated Brand

Attack Language

Reset Filters