Status Bar Dots
6272cf306c4190d0ccc4100c payroll20bec 20220503

Email Content

Subject

[Impersonated Employee Last Name] 03/05

Body

Hi [Recipient First Name],

Has payroll been completed? I received a new account today, what information would you need to update my direct deposit account?

Regards,
[Impersonated Employee Name].


Get Outlook for iOS

Analysis Overview

Vector

Text-based

Goal

Payroll Diversion

Tactic

Personalized Email Subject
Free Webmail Account
Spoofed Display Name

Impersonated Party

Employee - Other