Kurzfassung
Threat actors are sending over a million AI assisted emails impersonating CEOs and CFOs to trick accounts payable staff into processing fraudulent ACH payments of nearly $50,000. The campaign blends executive impersonation, vendor branding...
Wie es funktioniert
Threat actors are sending over a million AI assisted emails impersonating CEOs and CFOs to trick accounts payable staff into processing fraudulent ACH payments of nearly $50,000. The campaign blends executive impersonation, vendor branding...
Warnzeichen
- Email signature, display name, and reply to all impersonate an internal executive who never sends payment approvals by email A forwarded thread plus a detailed invoice PDF are attached to add false legitimacy Pressure to process an urgent ACH wire to a new or unfamiliar beneficiary
Was tun
- 1Verify any executive payment request out of band (phone call on a known number) before initiating any transfer Enable DMARC, SPF, and DKIM on your domain and warn staff about lookalike domain spoofs Require multi person approval and dual control workflows for ACH payments above a low threshold
Quelle
microsoft-security
Quelle geprueft vom Mythos Forensic Team
https://www.microsoft.com/en-us/security/blog/2026/09/10/protecting-organizations-ai-assisted-executive-impersonation-invoice-fraud/FAQ
Ist AI Assisted CEO Impersonation Targets Accounts Payable With Fabricated Invoices ein reales Betrugsmuster?
Ja. Behandeln Sie Nachricht, Anruf oder Zahlungsaufforderung als verdaechtig, bis ein offizieller Kanal sie bestaetigt.
Was sind die ersten Warnzeichen?
Email signature, display name, and reply to all impersonate an internal executive who never sends payment approvals by email A forwarded thread plus a detailed invoice PDF are attached to add false legitimacy Pressure to process an urgent ACH wire to a new or unfamiliar beneficiary
Was sollte ich zuerst tun?
Verify any executive payment request out of band (phone call on a known number) before initiating any transfer Enable DMARC, SPF, and DKIM on your domain and warn staff about lookalike domain spoofs Require multi person approval and dual control workflows for ACH payments above a low threshold
Kann LegalAudit meinen Fall pruefen?
Ja. Starten Sie den kostenlosen Chat und fuegen Sie Nachricht, Link, Absender oder Zahlungsdaten ein.