Status Bar Dots
6284097afc831169430420fc 1143237829

Email Content

Subject

Hello [Recipient Name]

Body

Hi [Recipient First Name],


I am closing my current account and I would like to make changes to my

Direct Deposit information with my new Bank account.


Can the changes be in effect before the current pay date?


Best Regards,


[Impersonated Employee Name]


Sent from my iPhone

Analysis Overview

Vector

Text-based

Goal

Payroll Diversion

Tactic

Matching Malicious Domain Username
Extended Spoofed Display Name
Personalized Email Subject
Maliciously Registered Domain

Impersonated Party

Employee - Other