News for hackers. Stuff that matters.

A comment on The 'bogus boss' email scam costing firms millions.

Re:The 'bogus boss' email scam costing firms millions by bluedino on Friday January 08, 2016 @01:09PM (#10866859)
Our CFO received an email like this, it appeared to be from the owner of our company. They even used [email protected] as the 'from' address. We don't use that naming scheme for email accounts, and it was actually using a Yahoo address as the 'reply-to' address.

Subject: Transfer

Hi John,

Hope your day is going on well, I need you to process a Transfer payment swiftly,let me know what details would be needed, to get it done as soon as possible

Kind Regards,

Jane Doe

Very weird, not sure if a bot puts these together or if there's human involvement.

[ Parent | on HN ]
Re:The 'bogus boss' email scam costing firms millions by danbower on Friday January 08, 2016 @04:59PM (#10868641)
> Very weird, not sure if a bot puts these together or if there's human involvement.

It'd be easy enough to source a list of company names and owners of the companies then generate possible domains and possible email addresses for the owners but you ultimately need to know who should receive the email. This probably involves a human digging around on LinkedIn. I have no idea what's it like to scrape LinkedIn but presumably they make it difficult. The difference between using the correct email address for the CFO but incorrect one for the owner suggests it's a bit of both.

[ Parent | on HN ]