Social Media Ideas for Business Email Compromise

Why business email compromise keeps landing on law firms, and why nobody is covering it

The verification rule has been in the Legal Practice Council Rules for years. Whether it gets followed on a busy Friday afternoon is a separate matter. If you have been anywhere ne...

Fake Acquisition Scam Uses Forged NDAs to Demand €626,000 Corporate Payment.

Threat actors impersonated Gen executives and major consulting firms in a targeted business email compromise-style operation that used forged non-disclosure agreements to isolate a...

Trust, Verify, Protect: Modernizing Email Security for the Cloud

Picture this: Your company just fell victim to a massive data breach. The culprit wasn't a sophisticated malware strain, a zero-day exploit, or a compromised firewall. It was a per...

Who Pays When a Wire Transfer Is Hijacked? How would NC or SC Law Handle it?

When a business email compromise scam succeeds, the scramble to recall the funds is usually only the first fight. We recently highlighted the unfortunate facts involved when a Sout...

What a $545,000 email scam in a South Carolina beach town reveals about municipal coverage gaps

An email chain with a sneaky URL change, a Utah bank account swap and a forged signature have left a small community reeling

SEBI warns of 'boss scam', a cyber fraud targeting top executives

The regulator warned that fraudsters are targeting finance executives and employees via email, WhatsApp, Microsoft Teams, and social media by impersonating CEOs or senior executive...

Microsoft 365 AitM Phishing Hijacks Accounts to Collect Payroll and Finance Emails

Cybersecurity researchers have called attention to an active "widespread email-driven phishing campaign" that employs adversary-in-the-middle (AitM) techniques to take control of M...

Real emails, hijacked payments: Two H1 2026 attack chains

Gen's H1 2026 Threat Report examines two separate attack chains. One used compromised business inboxes and browser manipulation in a banking-malware campaign, while the other used...

Anatomy of an Agent Tesla BEC Attack: From Inbox to In-Memory Infostealer

Lead Analysts: Prabhakaran Ravichandhiran and Jeewan Singh Jalal

Warning: ARToken Phishing Kit Automates BEC Attacks

Researchers at Cisco Talos are tracking a sophisticated phishing-as-a-service operator panel called “ARToken” that’s built on the EvilTokens phishing platform. ARToken focuses on t...

Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems

Brazilian financial services, retail, and e-commerce organizations have become the target of a financially motivated threat actor dubbed Breeze Comet (formerly UNC5669) since 2024....

Attackers Impersonating Small Businesses in Spoofing Attacks!

As more aspects of life and business move online, the prevalence of spoofing attacks has surged. Despite the addition of multiple security measures, in 2023, nearly 45.6 % of all e...

$3.5B lost to impersonator scams last year: Can you still spot a fake business text?

  Americans lost $3.5 billion to impersonator scams last year, according to the Federal Trade Commission (FTC), across every channel, including texts, phone calls and social media....

Financially Motivated Threat Actor BREEZE COMET Targets Brazil

Introduction  Beginning in 2024 Mandiant investigated a string of compromises affecting Brazilian financial services, retail, and eCommerce organizations. Google Threat Intelligenc...

$545,000 Wire Fraud Raises the Stakes for Contract Payments

A $545,000 wire fraud loss recently made national headlines when a South Carolina coastal town sent that amount to what it thought was a construction contractor, but it turned out...

Bank of Baroda Data Breach – Hackers Gained Access Via Employee Email Account

Bank of Baroda has confirmed a cybersecurity incident in which attackers gained unauthorized access to an employee’s email account, exposing internal communications and potentially...

Hackers Leveraging GoogleWorkspace Accounts to Send Phishing and Scam Emails

Hackers are turning compromised Google Workspace accounts into tools for phishing and scam emails. The messages can look ordinary because they come from real organizational domains...

Sebi warns listed firms, regulated entities against rising 'Boss Scam' cyber fraud

Sebi has issued a warning to all regulated entities regarding a rising cyber fraud known as the 'Boss Scam'. In this scheme, fraudsters masquerade as senior executives to deceive f...

Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks

Threat hunters have disclosed details of a widespread data theft and extortion threat cluster that's targeting Microsoft 365 and other software-as-a-service (SaaS) offerings throug...

CyberheistNews Vol 16 #33 [Blind Spot] Employees Are Easier to Scam Than They Think

Hackers Breach Brazilian Financial Firms and Execute Hundreds of Fraudulent Transactions

A financially motivated threat actor tracked as BREEZE COMET has breached Brazilian financial, retail, and eCommerce organizations, using privileged access to payment platforms to...

Town in Turmoil Over a $545,000 Email Phishing Scam

“The trap began with a routine bureaucratic ritual: the head of a family-run contracting company and a small town public-works director trading emails about when the municipality w...

Hackers Can Weaponize Microsoft Copilot to Hijack CEO Accounts and Redirect Wire Transfers

A new proof-of-concept reveals how attackers can turn Microsoft Copilot, the AI assistant embedded in Microsoft 365, into an unwitting accomplice for business email compromise (BEC...

Phantom Deal Hackers Impersonate Executives and Use Fake NDAs to Steal Corporate Wire Transfers

Cybercriminals are using fake acquisition deals to steer employees toward large wire transfers. The campaign, called Phantom Deal, begins with a believable WhatsApp message from so...