The New BEC Phishing Attack: Stealing Data Instead Of Cash

  /     /     /  
Publicated : 22/11/2024   Category : security


The New BEC Phishing Attack: Stealing Data Instead Of Cash


Duped by phishers posing as company executives, Seagate and Snapchat expose employee tax, payroll data.



Perhaps inspired by
business email compromise (BEC)
phishing campaigns astonishing success at parting companies from their money, phishermen are using the same tactics to part companies from their data.
In BEC phishing campaigns, attackers posing as business executives send messages to individuals in business departments who handle large payments and convince them to wire transfer huge sums of money to an attacker-controlled account. Now, as tax season (and tax fraud season) is underway, theyre asking for employee data, instead of money.
Last week,
Snapchat announced
that a scammer impersonating their CEO tricked their payroll department into emailing an attacker the payroll information of current and former Snapchat employees. Saturday,
it was reported
 that Alaskan telecom GCI was tricked into handing over employee W-2 forms by a phisher posing as the companys CFO. Sunday,
it was reported
that a Seagate employee was also fooled into sending thousands of employee W-2s by an email sent to HR and finance personnel by a phisher posing as the company CEO. 
All companies reported the incidents to federal authorities and offered affected individuals credit monitoring. 
 

Last News

▸ Beware EMV may not fully protect against skilled thieves. ◂
Discovered: 23/12/2024
Category: security

▸ Hack Your Hotel Room ◂
Discovered: 23/12/2024
Category: security

▸ Website hacks happened during World Cup final. ◂
Discovered: 23/12/2024
Category: security


Cyber Security Categories
Google Dorks Database
Exploits Vulnerability
Exploit Shellcodes

CVE List
Tools/Apps
News/Aarticles

Phishing Database
Deepfake Detection
Trends/Statistics & Live Infos



Tags:
The New BEC Phishing Attack: Stealing Data Instead Of Cash