xxx
On April 1, 2018, the CFO at Unatrac received a phishing email containing a link, which when clicked on, redirected the CFO to a phishing site that was designed to look like a legitimate Microsoft Office365 login page. The CFO unknowingly entered his login credentials on the fake web page, giving the criminals access to his credentials and, in turn, his entire account, according to the FBI affidavit.
Okeke and others accessed the CFO’s Office365 account 464 times between April 6 and April 20, 2018, mostly from IP addresses located in Nigeria, the FBI says. They sent fraudulent wire transfer requests from the account to Unatrac’s financial team. To add credibility to their requests, the cybercriminals would send fake invoices to the CFO’s account from external accounts and forward them to the finance team, the affidavit adds.
To hide their activities from the CFO, the conspirators created or modified the email filter rules for the account, intercepted legitimate emails from the finance team, marked them as read and moved them to another folder outside the inbox, the FBI says.
The finance team at Unatrac processed 15 payments to overseas accounts, totaling a sum of about $11 million, most of which could not be recovered by the time the company discovered the fraud, according to the affadavit.
From Nigerian Entrepreneur Pleads Guilty in $11 Million BEC Scam:
xxx