In April 2020, the world's largest sovereign wealth fund discovered that they had been defrauded of over $10 million after falling victim to a business email compromise scam during communications about a transfer which was intended for a micro-finance institution in Cambodia in March.
The sophisticated scheme involved spoofing email addresses, fabricating payment information and then directing the stolen cash into a bank account controlled by the attackers. Allegedly the diverted funds were channeled into a bank account in Mexico under the same name as the micro-finance institution.
The delay in detection was linked to the pandemic, the attacker changed expectations as to when the money would arrive by sending the micro-finance company an email falsely attributing any delays in receipt of funds to the COVID-19 lockdowns.
If you'd rather we did the heavy lifting in developing a cyber incident response plan or lessons learnt training for your organisation underpined by our unique insight into the challenges faced and strategies implemented by organisations countering today's cyber security threats then please contact us here.