Uncover the latest attacks sent to our Abnormal customers.
Employee Impersonation Payroll Diversion BEC Attack
Subject: “Information on a pay change

This text-based BEC attack impersonates an employee using a spoofed display name and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: June 22, 2022
Fake Document Link-based Malware Attack
Subject: “Re: AMENDED SALE AGREEMENT

This link-based attack impersonates an employee using a hijacked email thread, an external compromised account, a spoofed display name, and a fake document theme to deliver malware.

Attack Date: June 22, 2022
Employee Impersonation Employee Incentive Gift Card Request BEC Attack
Subject: “Surprise Incentive

This text-based BEC attack impersonates an employee using a maliciously registered domain, a spoofed display name, and an employee incentive theme to request the purchase of gift cards.

Attack Date: June 22, 2022
Employee Impersonation Payroll Diversion BEC Attack
Subject: “My Direct Deposit Guide

This text-based BEC attack impersonates an employee using a spoofed email address and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: June 22, 2022
Employee Impersonation Payroll Diversion BEC Attack
Subject: “earnings

This text-based BEC attack impersonates an employee using a maliciously registered domain and a spoofed display name to divert payroll deposits to a fraudulent account.

Attack Date: June 20, 2022
Spanish Employee Impersonation Payroll Diversion BEC Attack
Subject: “[no subject]

This text-based Spanish-language BEC attack impersonates an employee using a spoofed display name and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: June 15, 2022
Employee Impersonation Payroll Diversion BEC Attack
Subject: “[no subject]

This text-based BEC attack impersonates an employee using a spoofed display name and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: June 14, 2022
Italian Employee Impersonation Payroll Diversion BEC Attack
Subject: “conto buste paga aggiornato

This text-based Italian-language BEC attack impersonates an employee using a spoofed display name and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: June 13, 2022
German Employee Impersonation Payroll Diversion BEC Attack
Subject: “Lohnkonto aktualisiert

This text-based German-language BEC attack impersonates an employee using a spoofed display name and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: June 6, 2022
Employee Impersonation Gift Card Request BEC Attack
Subject: “AυαiIαbIe

This text-based BEC attack impersonates an employee using a foreign character substitution, a WhatsApp number request, a spoofed display name, and a free webmail account to request the purchase of gift cards.

Attack Date: May 30, 2022
Dutch Employee Impersonation Payroll Diversion BEC Attack
Subject: “Wijziging van salczarisgegevens

This text-based Dutch-language BEC attack impersonates an employee using a spoofed display name and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: May 23, 2022
Dutch Employee Impersonation Payroll Diversion BEC Attack
Subject: “Wijziging van gegevens

This text-based Dutch-language BEC attack impersonates an employee using a spoofed display name and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: May 20, 2022
Employee Impersonation Payroll Diversion BEC Attack
Subject: “DD Update [Impersonated Employee Name]

This text-based BEC attack impersonates an employee using a spoofed email address, a personalized email subject, and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: May 19, 2022
Employee Impersonation New Vendor Payment Fraud BEC Attack
Subject: “Thursday 19th May, 2022. Vendor's Payment

This text-based BEC attack impersonates an employee using a spoofed email address, a free webmail account, and a new vendor theme to request a fraudulent payment.

Attack Date: May 19, 2022
Employee Impersonation Payment Fraud BEC Attack
Subject: “Operating Expenses

This text-based BEC attack impersonates an employee using a spoofed display name and a free webmail account to request a fraudulent payment.

Attack Date: May 18, 2022
OneDrive COVID-19 Employee Incentive Fake Document Credential Phishing Attack
Subject: “Updated May salary review (Final Post-Covid-19 listing)

This link-based attack impersonates OneDrive and an employee using a self-addressed spoofed email, a COVID-19 theme, an employee incentive theme, and a fake document theme to steal credentials.

Attack Date: April 18, 2022
Employee Impersonation Payroll Diversion BEC Attack
Subject: “(no subject)

This text-based BEC attack impersonates an employee using a spoofed display name and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: May 17, 2022
Employee Impersonation Payroll Diversion BEC Attack
Subject: “Stub

This text-based BEC attack impersonates an employee using a spoofed display name and a maliciously registered domain to divert payroll deposits to a fraudulent account.

Attack Date: May 17, 2022
Employee Impersonation Payroll Diversion BEC Attack
Subject: “Hello [Recipient Name]

This text-based BEC attack impersonates an employee using an extended spoofed display name, a matching malicious domain username, a personalized email subject, and a maliciously registered domain to divert payroll deposits to a fraudulent account.

Attack Date: May 16, 2022
Employee Impersonation Employee Incentive Gift Card Request BEC Attack
Subject: “INTERNAL MEMO

This text-based BEC attack impersonates an employee using a spoofed display name, a free webmail account, and an employee incentive theme to request the purchase of gift cards.

Attack Date: May 15, 2022
Employee Impersonation Community Service Gift Card Request BEC Attack
Subject: “Community Giving

This text-based BEC attack impersonates an employee using a spoofed email address, a free webmail account, and a community service theme to request the purchase of gift cards.

Attack Date: May 12, 2022
Employee Impersonation Payroll Diversion BEC Attack
Subject: “Update Payment Information

This text-based BEC attack impersonates an employee using an external compromised account to divert payroll deposits to a fraudulent account.

Attack Date: May 2, 2022
Employee Impersonation Payroll Diversion BEC Attack
Subject: “Change My Details - [Impersonated Employee Name]

This text-based BEC attack impersonates an employee using a personalized email subject, a spoofed display name, and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: May 11, 2022
Dutch Employee Impersonation Payroll Diversion BEC Attack
Subject: “Salarisrekening bijgewerkt

This text-based Dutch-language BEC attack impersonates an employee using a spoofed display name and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: May 10, 2022
Spanish Employee Impersonation Payroll Diversion BEC Attack
Subject: “Cuenta de nómina actualizada

This text-based Spanish-language BEC attack impersonates an employee using a spoofed display name and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: May 10, 2022
Employee Impersonation Payroll Diversion BEC Attack
Subject: “New Direct Deposit Update

This text-based BEC attack impersonates an employee using a spoofed email address and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: May 9, 2022
Employee Impersonation Payroll Diversion BEC Attack
Subject: “Account Information Changed

This text-based BEC attack impersonates an employee using a spoofed email address and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: May 6, 2022
German Employee Impersonation Payroll Diversion BEC Attack
Subject: “DIREKTES EINZAHLUNGS-UPDATE

This text-based German-language BEC attack impersonates an employee using display name spoofing and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: May 6, 2022
Employee Impersonation Gift Card BEC Attack
Subject: “PLEA

This text-based BEC attack impersonates an employee using display name spoofing and a free webmail account to request the purchase of gift cards.

Attack Date: May 5, 2022
Employee Impersonation Payroll Diversion BEC Attack
Subject: “Modify Adjure

This text-based BEC attack impersonates an employee using display name spoofing and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: May 5, 2022
Employee Impersonation New Vendor Payment Fraud BEC Attack
Subject: “Check for a new vendor

This text-based BEC attack impersonates an employee using display name spoofing, a free webmail account, and a new vendor theme to request a fraudulent payment.

Attack Date: May 5, 2022
Employee Impersonation Aging Report BEC Attack
Subject: “Aged Creditors

This text-based BEC attack impersonates an employee using display name spoofing and a maliciously registered domain to request a copy of an aging report.

Attack Date: March 28, 2022
Employee Impersonation Payroll Diversion BEC Attack
Subject: “[Recipient Company Name]

This text-based BEC attack impersonates an employee using a personalized email subject, display name spoofing, and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: May 4, 2022
Employee Impersonation Payment Fraud BEC Attack
Subject: “[Recipient First Name]

This text-based BEC attack impersonates an employee using a personalized email subject, display name spoofing, and a free webmail account to request a fraudulent payment.

Attack Date: May 3, 2022
Employee Impersonation Payroll Diversion BEC Attack
Subject: “[Impersonated Employee Last Name] 03/05

This text-based BEC attack impersonates an employee using a personalized email subject, display name spoofing, and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: May 3, 2022
Employee Impersonation Payroll Diversion BEC Attack

This text-based BEC attack impersonates an employee using display name spoofing and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: March 8, 2022
Employee Impersonation Payroll Diversion BEC Attack
Subject: “Direct Deposit Update

This text-based BEC attack impersonates a non-executive employee using display name spoofing and a maliciously registered domain to divert payroll deposits to a fraudulent account.

Attack Date: April 19, 2022
Employee Impersonation Payroll Diversion BEC Attack
Subject: “NEW FINANCIAL INSTITUTION INFORMATION UPDATE

This text-based BEC attack impersonates a non-executive employee using display name spoofing and a free webmail account to divert payroll deposits to a fraudulent account.

Attack Date: April 13, 2022

Filters

Attack Vector

Attack Goal

Attack Tactic

Impersonated Party

Attack Type

Theme

Impersonated Brand

Attack Language