Medium
Researchers have discovered a campaign targeting financial data from companies. The email is relatively simple but customized towards the target. The display name is spoofed to appear to come from an executive at a global financial firm. The sender and Reply-To header appear to be associated with a legitimate law firm, likely comprised by the attackers in order to increase legitimacy and evade detection. The body of the email targets the recipient directly with their first name contained in the introduction. Various financial details are then urgently requested. If a recipient falls victim and provides the information, the attackers can leverage it for financial fraud.
Please get this information