News for hackers. Stuff that matters.
Re:The 'bogus boss' email scam costing firms millions by leftwich on Friday January 08, 2016 @09:35AM (#10865074)
Emails should not be used to approve six figure cash transactions. An account reconciliation or approval of PTO? Sure.

You can easily set up your online banking to require one individual to intiate a wire transfer, and a separate individual to approve the transaction. This is a very basic financial control.

My guess is the companies falling victim to this don't have any formal controls in place.

Re:The 'bogus boss' email scam costing firms millions by rwmurrayVT on Friday January 08, 2016 @09:44AM (#10865144)
It all depends on the size of the company and the stupidity of the accounting/purchasing department. The article describes the fraud ranging from modest to sizable. It's not uncommon for many business to have 50k transactions every week. You don't want to go around getting approval for every transaction every day. It's not uncommon for many businesses to have 300k transactions every month.

The business that lost 30m+ I don't understand... It must have been multiple wires over a period of time. They found some vulnerable accountant with the power and just milked them over time.

Re:The 'bogus boss' email scam costing firms millions by leftwich on Saturday January 09, 2016 @02:55PM (#10872602)
Not all transactions are created equal. Six figure cash disbursement transactions should require approval.

And any company that has so many six figure cash disbursement transactions that approving them is an administrative burden is the type of company that most needs this kind of control in the first place.

Re:The 'bogus boss' email scam costing firms millions by cm2187 on Friday January 08, 2016 @09:47AM (#10865171)
I have seen emails regularly used to approve 9 and 10 figures transactions. But the approval always knew about the transaction, had talked about it with the relevant manager. And often would double check with the manager they trust that everything is in order.
Re:The 'bogus boss' email scam costing firms millions by thesis on Friday January 08, 2016 @10:03AM (#10865294)
Can you elaborate at all what kind of billion dollar transactions a manager is approving?
Re:The 'bogus boss' email scam costing firms millions by cm2187 on Friday January 08, 2016 @10:08AM (#10865336)
Releasing the funds on a loan, issuing a bond, redeeming a bond, etc.