Category Archives: Business Email Compromise

FBI, Dutch Police Disrupt ‘Manipulaters’ Phishing Gang

Posted on by

The FBI and authorities in The Netherlands this week seized a number of servers and domains for a hugely popular spam and malware dissemination service operating out of Pakistan. The proprietors of the service, who use the collective nickname “The Manipulaters,” have been the subject of three stories published here since 2015. The FBI said the main clientele are organized crime groups that try to trick victim companies into making payments to a third party. Continue reading FBI, Dutch Police Disrupt ‘Manipulaters’ Phishing Gang→

‘Sneaky Log’ Microsoft Spoofing Scheme Sidesteps Two-Factor Security

Posted on by

The phishing-as-a-service kit from Sneaky Log creates fake authentication pages to farm account information, including two-factor security codes. Continue reading ‘Sneaky Log’ Microsoft Spoofing Scheme Sidesteps Two-Factor Security→

Over $40 million recovered and arrests made within days of firm realising it had fallen for Business Email Compromise scam

Posted on by

According to the FBI, billions of dollars have been lost through Business Email Compromise (BEC) attacks in recent years, so you may well think that there is little in the way of good news.

However, it has been revealed this week that police managed… Continue reading Over $40 million recovered and arrests made within days of firm realising it had fallen for Business Email Compromise scam→

Convicted BEC scammer could face over 100 years in prison

Posted on by

A US court has found a Nigerian national guilty of charges related to a US $1.5 million business email compromise (BEC) scam and could face the rest of his life in prison as a consequence.

Read more in my article on the Hot for Security blog. Continue reading Convicted BEC scammer could face over 100 years in prison→

10 years in prison for $4.5 million BEC scammer who bought Ferrari to launder money

Posted on by

A scammer has been sentenced to 10 years in prison for laundering over US $4.5 million obtained by targeting businesses and the elderly with Business Email Compromise (BEC) and romance fraud schemes.

Read more in my article on the Tripwire State of … Continue reading 10 years in prison for $4.5 million BEC scammer who bought Ferrari to launder money→

Microsoft’s Security Copilot Enters General Availability

Posted on by

Microsoft’s AI chatbot and data aggregator is open for security business on April 1, with a new per-unit pricing model. Continue reading Microsoft’s Security Copilot Enters General Availability→

$12.5 billion lost to cybercrime, amid tidal wave of crypto investment fraud

Posted on by

If you have been optimistically daydreaming that losses attributed to cybercrime might have reduced in the last year, it’s time to wake up.

The FBI’s latest annual Internet Crime Complaint Center (IC3) report has just been published, and makes for s… Continue reading $12.5 billion lost to cybercrime, amid tidal wave of crypto investment fraud→

Smashing Security podcast #358: Hong Kong hijinks, pig butchers, and poor ransomware gangs

Posted on by

Is this the real life? Is this just fantasy? A company in Hong Kong suffers a sophisticated deepfake duping, be one your guard from pig butchers as Valentine’s Day approaches, and spare a moment to feel sorry for poor ransomware gangs.

All this and … Continue reading Smashing Security podcast #358: Hong Kong hijinks, pig butchers, and poor ransomware gangs→

Sekoia: Latest in the Financial Sector Cyber Threat Landscape

Posted on by

Phishing, infostealer malware, ransomware, supply chain attacks, data breaches and crypto-related attacks are among the top evolving threats in the financial sector, says Sekoia. Continue reading Sekoia: Latest in the Financial Sector Cyber Threat Landscape→

Smashing Security podcast #332: Nudes leak at the plastic surgery, Mali mail mix-up, and WormGPT

Posted on by

Dr 90210 finds himself in a sticky situation after his patients’ plastic surgery photos AND more end up in the hands of hackers, emails to the US military end up in the wrong hands, and script kiddies salivate at the thought of Business Email Compromis… Continue reading Smashing Security podcast #332: Nudes leak at the plastic surgery, Mali mail mix-up, and WormGPT→