Radar des arnaques
BEC et CEO fraud ont cause 2,9 milliards USD de pertes confirmees en 2023 selon FBI IC3. La vague 2024-2025 ajoute le clonage vocal IA.
L'attaquant compromet la messagerie d'un fournisseur via phishing. Il s'invite dans le fil de mail, envoie une nouvelle facture PDF identique a la precedente mais avec IBAN modifie ('nouvelle banque,...
Mode opératoire identique à Arup / WPP, mais ciblé sur entreprises françaises (CAC40, ETI): visio Teams/Zoom où le 'PDG' et le 'DAF' sont des deepfakes en temps réel demandant un virement urgent à...
ARToken / EvilTokens: device code phishing against Microsoft 365 Security researchers at Cisco Talos uncovered ARToken , a phishing-as-a-service platform linked to the EvilTokens toolkit, that abuses...
Switzerland's National Cyber Security Centre (NCSC) consistently reports phishing, fake bank/Microsoft 'support' calls, investment fraud (fake brokers/crypto), parcel/customs smishing, and...
Following the Arup HK$200M (~USD 25.6M) case, real-time deepfake video-call fraud has spread: finance staff are invited to a Teams/Zoom call where the 'CFO' and 'colleagues' are AI-generated,...
The European Payments Council's 2025 Payment Threats and Fraud Trends report identifies social engineering and Authorised Push Payment (APP) fraud as the leading EU payment-fraud drivers, amplified...
Europol's Internet Organised Crime Threat Assessment (IOCTA) 2026 names online fraud the fastest-growing area of internet-enabled organised crime. Schemes increasingly use AI to impersonate bank...
In 2025 the FBI IC3 received more than 22,000 complaints citing AI involvement, with losses exceeding USD 893 million. Criminals use generative AI to: clone a relative's or executive's voice from...
EvilTokens is a phishing-as-a-service kit sold on Telegram that compromises Microsoft 365 accounts without fake login pages or stolen passwords. Attackers trick victims into completing a legitimate...
Europol IOCTA 2026 highlights how AI, encryption and proxies have industrialised cross-border EU fraud. Fraud-as-a-Service kits enable mass-scale BEC, romance scams and investment fraud with...
Caller claims to be FBI, US Marshal, DEA or local sheriff with an active warrant for missed jury duty, drug trafficking or contempt. Victim told to avoid arrest by paying 'bond' in cash, gift cards,...
Scammer poses as USCIS, ICE or 'notario público' offering DV lottery win, expedited green card, or threatening deportation unless fee is paid. FTC + DOJ: immigration scams cost vulnerable communities...
Caller spoofs utility number, claims account is 60+ days past due and power/gas will be shut off within 30 minutes unless victim pays via prepaid card (Vanilla, Green Dot MoneyPak), Bitcoin ATM or...
Scammer texts/emails 'you qualify for Biden / Trump student loan forgiveness — pay $399 processing fee' or asks for FSA ID password to 'apply on your behalf'. Federal student aid programs (PSLF,...
Attacker emails HR/payroll from a lookalike of employee's address (john.smith@gmaiI.com with capital I instead of l), requesting a direct-deposit change to a different bank, often a neobank or...
January-March: attacker spoofs CEO / CFO email to HR/payroll: 'Please send me the W-2s of all employees for review before filing.' HR replies with a ZIP / Excel containing SSN, address and 2024 wages...
Finance employee receives Teams/Zoom call where the CEO's voice and (increasingly) video are AI-generated using ElevenLabs / HeyGen / public earnings call footage. Voice instructs urgent wire to 'M&A...
CERT NZ reports BEC in 2024 cost NZ businesses NZ$13M+, predominantly law / accounting / property firms whose clients receive a 'change of trust account' email mid-conveyance. Indicators: M365...
Ouvrez Mythos et collez-le. Triage gratuit en secondes. Dossier forensique des CHF 29/mois.