Payroll Diversion

Employee - Executive

62bb4452e89d5b7c76a5f8f6 1016145823

Free Webmail Account

Spoofed Display Name

Business Email Compromise

Text-based

Hello, good morning. I need your help in updating my (Direct Deposit) details. Can I just send a voided check? My payroll portal isn't working,Wishing you a wonderful day. Sincerely, regards.[Executive Name][Executive Title]

Executive Impersonation Payment Fraud BEC Attack

Executive Impersonation Payroll Diversion BEC Attack

Vendor Impersonation Payment Inquiry BEC Attack

German Executive Impersonation Gift Card Request BEC Attack

Homepage

The Abnormal Attack Vault

Breadcrumbs

Discover the tactics, goal, and vector of a real-world email attack blocked by Abnormal Security.

description

https://intelligence.abnormalsecurity.com/attack-vault/executive-impersonation-payroll-diversion-bec-attack-8964916748343614586

referrer

robots

{"title":{"title":"Abnormal Intelligence | Executive Impersonation Payroll Diversion BEC…"}}

This text-based BEC attack impersonates an executive using a spoofed display name and a free webmail account to divert payroll deposits to a fraudulent account.

Subscribe to our monthly newsletter to receive the latest insights from our team directly in your inbox.

Abnormal Intelligence Email Subscribe

Top Bar

New BEC Insights from Chris Krebs, Former Director of CISA

Executive Impersonation Payroll Diversion BEC Attack

Email Content

Subject

Body

Analysis Overview

Type

Vector

Goal

Tactic

Impersonated Party