Help Net Security reported:
Active police and government email accounts are being sold on the dark web for as little as $40, giving cybercriminals a direct line into systems and services that rely on institutional trust. According to new research from Abnormal AI, the accounts come from agencies in the United States, United Kingdom, Germany, India, and Brazil, and are being traded on underground forums.
Find the original article here.
Key Takeaway: Authenticate all vendor inquiries before responding and all requests for adds or changes to your vendor master file. Access to government email addresses can be used to send requests that appear legitimate to change vendor remittance details.
Enroll in Training Sessions: Last Thursday of Every Month is Training on Frauds and New Scam Alerts and How to Combat
Key Takeaway: Authenticate all vendor inquiries before responding and all requests for adds or changes to your vendor master file. Access to government email addresses can be used to send requests that appear legitimate to change vendor remittance details.
Enroll in Training Sessions: Last Thursday of Every Month is Training on Frauds and New Scam Alerts and How to Combat