Status Bar Dots
626fe92176be54d952a61985 payroll20diversion 20220501

Email Content

Subject

DD UPDATE

Body

Hey!

Hope you are doing well!

I have recently changed banks and would like to have my direct deposit updated to my new bank account. Can you please ensure the change is effective immediately for the next pay date?

Thanks!
[Impersonated Executive Name]

Analysis Overview

Vector

Text-based

Goal

Payroll Diversion

Tactic

Maliciously Registered Domain
Spoofed Email Address

Impersonated Party

Employee - Executive