Payroll Diversion

Employee - Executive

6279529ea2d31f22cc998d21 payroll20bec 20220425

Maliciously Registered Domain

Spoofed Email Address

Business Email Compromise

Text-based

Hi , I changed my bank and I'll like to update my paycheck deposit details, can the change be effective for the current pay date? also can i send the new details to you now ?‍[Executive Name]. Sent from my iPhone

Dropbox Fake Document Credential Phishing Attack

German Employee Impersonation Payroll Diversion BEC Attack

Employee Impersonation Payroll Diversion BEC Attack

Executive Impersonation Payment Fraud BEC Attack

Homepage

The Abnormal Attack Vault

Executive Impersonation Payroll Diversion BEC Attack

Breadcrumbs

Discover the tactics, goal, and vector of a real-world email attack blocked by Abnormal Security.

description

https://intelligence.abnormalsecurity.com/attack-vault/executive-impersonation-payroll-diversion-bec-attack-3

referrer

robots

{"title":{"title":"Abnormal Intelligence | Executive Impersonation Payroll Diversion BEC…"}}

This text-based BEC attack impersonates an executive using a spoofed email address and a maliciously registered domain to divert payroll deposits to a fraudulent account.

Subscribe to our monthly newsletter to receive the latest insights from our team directly in your inbox.

Abnormal Intelligence Email Subscribe

Top Bar

New BEC Insights from Chris Krebs, Former Director of CISA

Executive Impersonation Payroll Diversion BEC Attack

Email Content

Subject

Body

Analysis Overview

Type

Vector

Goal

Tactic

Impersonated Party