SEVERE WX : Heat Advisory View Alerts

Top CFOs are being targeted by a sophisticated email scam

A group of hackers based in Nigeria is trying to trick thousands of top executives across the globe into sen...

Posted: Dec 4, 2018 2:51 PM
Updated: Dec 4, 2018 2:51 PM

A group of hackers based in Nigeria is trying to trick thousands of top executives across the globe into sending them company funds.

The ambitious scheme that mainly targets chief financial officers via email is described in a new report by cybersecurity firm Agari, which investigated the group after coming under attack itself.

Business operations

Business, economy and trade

Company activities and management

Corporate finance

Continents and regions

Digital security

England

Europe

London

Northern Europe

Technology

United Kingdom

Crime, law enforcement and corrections

Criminal offenses

Fraud and financial crimes

Wire fraud

"Targets included companies in a very broad range of sectors, from small businesses to the largest multinational corporations," the report warns. More than half of them are in the United States.

The attackers are carrying out an increasingly common scam known as "business email compromise" in which they attempt to pose as a company insider, such as the CEO, requesting a money transfer to an outside account.

The FBI estimates that businesses around the world lost more than $12 billion through this kind of email scam between October 2013 and May 2018.

Agari said that the Nigerian group, which it calls "London Blue," has developed a highly sophisticated operation to dupe money out of finance executives.

"London Blue operates like a modern corporation," the report says. The group has people working on business intelligence, sales, email marketing, financial operations and human resources, according to Agari.

It carries out attacks in multiple languages and has at least 17 collaborators in the United States, United Kingdom and other Western European countries who are mainly involved in moving stolen money, Agari added.

50,000 finance execs on the target list

The email security firm said that during its investigation, it got hold of a list of the group's potential targets this year that contained more than 50,000 finance executives, of which 71% were CFOs.

Agari declined to reveal how it secured the data, other than saying it had actively engaged with the scammers. It said it had shared the info with US and UK law enforcement.

"Several of the world's biggest banks each had dozens of executives listed," it said. "The group also singled out mortgage companies for special attention, which would enable scams that steal real estate purchases or lease payments."

As well as the United States, companies in more than 80 other countries were on the list, including Spain, the United Kingdom, Finland, the Netherlands and Mexico.

Agari said it became aware of London Blue after the group tried to trick the security firm's own CFO in August. Agari said it "then engaged actively with the attacker, giving us an initial glimpse of the gang that we would widen into a penetrating X-ray."

London Blue relies on commercial data providers, most recently one based in San Francisco, to build up its list of targets and gather information about them, according to the report. That includes executives' names, company titles, work email addresses and personal email addresses.

The list of more than 300 potential targets on which Agari's CFO appeared was obtained by London Blue from a commercial data provider in November 2017.

The list also contained information about "CFO victims at one of the world's top private universities, a major enterprise data storage company, a famed guitar maker, casinos and hotels, a retirement home, and small and medium-sized businesses of all types," the report says.

Agari estimated that the scam has caused damage worth hundreds of thousands of dollars.

Minnesota Coronavirus Cases

Data is updated nightly.

Confirmed Cases: 38569

Reported Deaths: 1511
CountyConfirmedDeaths
Hennepin12456787
Ramsey4911228
Dakota238291
Stearns237119
Anoka2241109
Nobles16696
Olmsted112915
Washington111440
Mower9522
Rice8447
Scott7344
Clay58738
Kandiyohi5731
Blue Earth4792
Wright4755
Todd4012
Carver3811
Sherburne3175
Lyon3162
Freeborn2920
Watonwan2340
Steele2311
Benton2173
St. Louis18015
Martin1695
Nicollet16912
Cottonwood1360
Goodhue1318
Winona12515
Crow Wing10612
Pine1050
Le Sueur1031
Chisago1001
Otter Tail951
McLeod920
Carlton870
Dodge870
Polk822
Chippewa791
Unassigned7837
Isanti730
Waseca680
Douglas650
Itasca6412
Murray640
Meeker611
Morrison591
Becker560
Faribault560
Jackson550
Sibley542
Pipestone522
Pennington510
Renville352
Mille Lacs342
Wabasha330
Brown312
Rock310
Beltrami300
Fillmore300
Yellow Medicine300
Houston260
Swift221
Wilkin213
Norman200
Redwood180
Cass162
Roseau160
Aitkin150
Big Stone150
Koochiching151
Wadena150
Kanabec141
Grant120
Marshall120
Lincoln100
Pope100
Mahnomen91
Clearwater80
Hubbard70
Lake60
Traverse60
Lac qui Parle40
Stevens40
Red Lake30
Kittson20
Cook10
Lake of the Woods00

Iowa Coronavirus Cases

Data is updated nightly.

Confirmed Cases: 31670

Reported Deaths: 722
CountyConfirmedDeaths
Polk6638179
Woodbury325244
Black Hawk230158
Buena Vista171411
Johnson13148
Linn129482
Dallas128029
Marshall104919
Scott81510
Story7793
Pottawattamie73612
Wapello70830
Dubuque70222
Crawford6772
Muscatine64344
Sioux4770
Tama46529
Wright3861
Louisa36213
Jasper32517
Plymouth3225
Warren2901
Dickinson2663
Washington2439
Webster2292
Hamilton1891
Cerro Gordo1821
Boone1481
Clay1340
Clarke1322
Allamakee1314
Mahaska11617
Shelby1140
Clinton1121
Poweshiek1068
Carroll991
Pocahontas971
Bremer946
Des Moines922
Franklin900
Emmet880
Henry863
Cedar841
Taylor790
Hardin770
Monona770
Cherokee751
Floyd732
Marion700
Benton691
Guthrie664
Jefferson640
Sac640
Osceola620
Jones610
Butler572
Buchanan551
Humboldt551
Hancock540
Harrison540
Lee542
Calhoun532
Iowa530
Delaware511
Fayette510
Monroe516
Madison482
Clayton443
Lyon440
Davis411
Palo Alto410
Mitchell390
Winneshiek390
Grundy380
Mills370
Kossuth350
Howard340
Jackson320
Lucas314
Greene300
Chickasaw290
Union290
Winnebago290
Ida240
Cass230
Van Buren220
Appanoose213
Keokuk211
Page210
Worth200
Unassigned170
Adair160
Audubon161
Ringgold160
Decatur120
Montgomery102
Wayne100
Adams80
Fremont70
Rochester
Clear
86° wxIcon
Hi: 83° Lo: 70°
Feels Like: 89°
Mason City
Few Clouds
86° wxIcon
Hi: 88° Lo: 71°
Feels Like: 88°
Albert Lea
Clear
86° wxIcon
Hi: 89° Lo: 72°
Feels Like: 88°
Austin
Scattered Clouds
86° wxIcon
Hi: 86° Lo: 71°
Feels Like: 90°
Charles City
Few Clouds
84° wxIcon
Hi: 88° Lo: 71°
Feels Like: 90°
Some relief in sight, after more storms
KIMT Radar
KIMT Eye in the sky

Latest Video

Image

Masks not reccomended while exercising

Image

Prioritizing Childcare Funding

Image

Mask Mandate enforcement

Image

Staying safe in the heat

Image

Restaurant decides to go back to take-out amid surge in cases

Image

Shop Local Safely

Image

Expanded Team of Community Outreach

Image

Protecting Residents and Staff

Image

Dave's Noon Forecast 7/7

Image

Rochester businesses close out of precaution

Community Events