This prolific phishing gang is back with new tactics to target executives
A prolific cyber criminal phishing operation which built a list of 50,000 executives, CFOs and other top financial personnel has expanded its operations with a new database of additional targets.
Initially uncovered by researchers at cyber security company Agari, the Business Email Compromise (BEC) group dubbed London Blue distributes phishing emails in an effort to trick organisations into transferring large sums of money into their accounts, often while posing as executives and other senior staff.
The group, which works between Nigeria, the UK and several other countries, remains active and has tweaked their tactics in an effort to remain effective. Previously, the attackers used temporary accounts from free email service providers which used a name known to the intended victim to conduct their attacks. Now they've stepped up their game, sending BEC emails which don't only contain a convincing name, but also use a spoofed address which mimics that of the company in order to add more authenticity to attacks.