Microsoft researchers reported a large wave of fraudulent business email compromise emails that used AI-like templates, executive impersonation, and fabricated invoice threads to deceive accounts payable teams. The campaign sent more than a million emails, targeted mostly U.S. recipients, and impersonated executives and ServiceNow to push nearly $50,000 in fake payments. #Microsoft #ServiceNow #BusinessEmailCompromise
Keypoints
- Microsoft observed a massive BEC campaign with more than a million fraudulent emails.
- The attackers impersonated top executives to pressure accounts payable teams into sending fake payments.
- ServiceNow was also impersonated in fabricated email threads and invoice chains.
- Microsoft found signs consistent with AI-assisted template development in the messages.
- About 88% of the campaign’s targets were in the United States.
Read More: https://therecord.media/invoice-scam-emails-new-features-microsoft-researchers