Back to All Attacks
Attack Date: May 3, 2022
Executive Impersonation W-2 Theft BEC Attack
This text-based BEC attack impersonates an executive using a personalized email subject, display name spoofing, and a maliciously registered domain to steal employee W-2s..
Email Content
Subject
[Recipient First Name]
Body
[Recipient First Name],
Do you have a moment? I need you to send me the 2021 W-2 (PDF) and earnings summary of all employees. I need these via email immediately for a quick review.
Thanks,
[Executive Name]