Large Enterprises Targeted in Fake Merger & Acquisition Scams
Summary
Threat actors are executing a sophisticated campaign dubbed "Phantom Deal," specifically targeting large enterprises. These actors meticulously research companies to deceive midlevel employees into authorizing significant financial transfers through fake merger and acquisition schemes.
IFF Assessment
This campaign represents a significant threat to enterprises, as it involves sophisticated social engineering tactics designed to defraud them of large sums of money.
Defender Context
This highlights the growing sophistication of business email compromise (BEC) attacks, moving beyond simple phishing to intricate social engineering schemes. Defenders should focus on enhancing employee training for recognizing elaborate social engineering tactics and implementing stricter financial transaction verification processes.