The Record reported:
In early August, the researchers found a campaign made up of more than a million emails targeting its users. Using several third-party services to dispatch the emails, the attackers impersonated top executives at firms, telling accounts payable departments to send fraudulent payments of nearly $50,000.
The attackers made the emails appear more legitimate by including a forwarded email thread from the fake CEO to ServiceNow, a cloud-based enterprise platform that automates workflows and business processes. (ServiceNow also was impersonated.)
The forwarded emails fabricated an email chain where the phony CEO sent invoices allegedly received from ServiceNow (which was also being impersonated).
The attackers made the emails appear more legitimate by including a forwarded email thread from the fake CEO to ServiceNow, a cloud-based enterprise platform that automates workflows and business processes. (ServiceNow also was impersonated.)
The forwarded emails fabricated an email chain where the phony CEO sent invoices allegedly received from ServiceNow (which was also being impersonated).
Find the original article here.
Takeaway: Have processes in place to require dual approval that helps to have a second set of eyes on a request to send a payment from email. Also include in your AP policy that executive requests for payment should not be processed, rather the request should go through the correct workflow. This way if any employee is sent a similar email, the request itself will be the red flag.
Enroll in Training Sessions: Last Thursday of Every Month is Training on Frauds and New Scam Alerts and How to Combat
Takeaway: Have processes in place to require dual approval that helps to have a second set of eyes on a request to send a payment from email. Also include in your AP policy that executive requests for payment should not be processed, rather the request should go through the correct workflow. This way if any employee is sent a similar email, the request itself will be the red flag.
Enroll in Training Sessions: Last Thursday of Every Month is Training on Frauds and New Scam Alerts and How to Combat
Created with
