This CFO fell for phishing scam

[space-time]

Cable giants Leoni AG lose €40m after CFO transfers funds to hacker's bank account

http://www.ibtimes.co.uk/cable-giants-le...nt-1579335

[cbelt3]

It's called "Spear Phishing". And it happens everywhere.

We had a senior director get caught in a spear phishing attack. In responding to an 'invoice', he load ransomware, which then attacked our main file share systems before internal alarms went off and our security group shut everything down and restored from backup.

The attacker knew a LOT about our company... internal processes, document formats, people's names, etc. A lot of research went into the attack. That's what makes it so frightening.

[testcase]

Four offices and, only the office in Romania is authorized to transfer money out of the company. Sounds phishy.

[max]

testcase wrote:
Four offices and, only the office in Romania is authorized to transfer money out of the company. Sounds phishy.

That is incorrect, only the factory office in Romania, out of the four in that country, is authorized to transfer money for the four of the manufacturing operations.....

[NewtonMP2100]

....might be because.....PHISH gotta' swim....birds gotta' fly........???

[fauch]

Do major cooperate CEOs really just "email" their subordinates and tell them to wire 40 million bucks into someone else's account?

Can and will the average CFO then just "do that" without any oversight or verification?

If that is the case, I'm shocked this sort of thing doesn't happen all the time. It's not that hard to forge an email...