[AusNOG] spear phishing attack

[Scott Wilson]

Morning all,

Just got my first ever "live" spear phishing attack - an email slipped
through purporting to be from our MD to our CFO, asking for a $14k invoice
to be paid. They've named an australian BSB and account #, so I'm curious
as to what the attack vector is - is that bank account compromised? Do they
rely on a bounceback after a few days and then follow up with "oh,
actually, that should have gone via western union..." or is there something
more sophisticated at work?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20190204/a4c8d549/attachment.html>