Back to All Attacks
Attack Date: May 16, 2022
Employee Impersonation Payroll Diversion BEC Attack
This text-based BEC attack impersonates an employee using an extended spoofed display name, a matching malicious domain username, a personalized email subject, and a maliciously registered domain to divert payroll deposits to a fraudulent account.
Email Content
Subject
Hello [Recipient Name]
Body
Hi [Recipient First Name],
I am closing my current account and I would like to make changes to my
Direct Deposit information with my new Bank account.
Can the changes be in effect before the current pay date?
Best Regards,
[Impersonated Employee Name]
Sent from my iPhone