Status Bar Dots
6263034bc119b1fc7831fdd6 payroll 20220413

Email Content

Subject

NEW FINANCIAL INSTITUTION INFORMATION UPDATE

Body

Hello,

Asap: I would like to change my financial institution on file to a secured banking information and I will appreciate it if you can make the changes for me at your end and can i send you my new banking information before the next payroll is submitted?

Thanks,

[Employee Name]

Analysis Overview

Vector

Text-based

Goal

Payroll Diversion

Tactic

Free Webmail Account
Spoofed Display Name

Impersonated Party

Employee - Other