Phishers Target Aviation Execs to Scam Customers
Summary: A transportation-industry reader told KrebsOnSecurity that an executive's Microsoft 365 credentials were phished at a fake login page, after which attackers mined the inbox for invoice threads and sent modified payment demands from a look-alike domain registered hours later, costing one customer a six-figure loss. Pivoting on registration details such as roomservice801@gmail.com - tied to at least 240 domains registered in 2024 or 2025 - led to Palo Alto Networks Unit 42's indicator list for SilverTerrier, a Nigerian business email compromise group it named in 2014.
Bottom line: BEC drew more than 21,000 IC3 complaints in 2024 and nearly $2.8 billion in claimed losses, and the FBI's Financial Fraud Kill Chain recovered funds in 66 percent of cases in 2024 - but only for complaints filed at ic3.gov generally within 72 hours of the transfer.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026