Status Bar Dots
62729fcce533fb5e0e68065b payment20bec 20220428a
Status Bar Dots
62729fcfcf3434e15da8b57c payment20bec 20220428b
Status Bar Dots
62729fdadf13d5d03f5e6d29 payment20bec 20220428c

Email Content

Subject

Financial Update

Body

Hi [Recipient Name],


I was just informed that we have an offer accepted by a new vendor which I have been negotiating for some time now. Are you able to process the payment ? so I can forward you a copy of the invoice and W9.



Regards,
[Impersonated Executive Name]




Sent from my iPhone

Analysis Overview

Vector

Text-based

Goal

Payment Fraud

Tactic

Maliciously Registered Domain
Spoofed Display Name

Theme

New Vendor

Impersonated Party

Employee - Executive