4 ms·
Yes. Basically. I've seen similar attacks before, granted for lower amounts, but in many companies, finance departments sending out wires for many hundreds of
by pquerna 11y ago
Yes. Basically.
I've seen similar attacks before, granted for lower amounts, but in many companies, finance departments sending out wires for many hundreds of thousands of dollars is a common operation -- suppliers, contracts signed, and everyone wants their wire transfer to be done ASAP.
Get an email from the CFO/CEO/SVP of X saying to wire money for contract Z ASAP, and action will be taken.
- andor 11y agoSounds like cryptographically signing emails is not such a bad idea after all...
- chinathrow 11y agoSounds like taking transfer orders via email at all is still a bad idea after all...
- omouse 11y agoThis is why Estonia's e-residency program focus on authentication and digital signing. It should be harder to steal a crypto key no?
- roasty 11y agoYeah, except it's also possible, and not unusual, to compromise the cfo or someone's email/computer and then send signed emails all day.
- booop 11y agoAt my company any email request like that is verified by a phone call. (Don't know if that would have helped here).