Incident Response, TDR

Phony invoices target corporate execs in phishing campaign

Corporate executives should be wary of phishing emails making the rounds asking them to pay off outstanding invoices.

While they may be accustomed to receiving these types of messages, a recent scam campaign uncovered by researchers at security firm PhishLabs targets these execs with messages that impersonate a “reseller or distributor” with which the target already has a working relationship.

According to a blog post by PhishLabs, the message asks for a new or outstanding invoice to be paid via a wire transfer and includes an attachment with a PDF file that contains the account information.

While the PDF file is not a malicious one, the accounts that the phony invoices list are located in banks in the U.S., UK, China and Taiwan. Experts are not sure if these are compromised accounts, or if they were set up specifically for this scheme.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.