De Kalb County, Indiana fell prey to vendor impersonation billing
DeKalb County, Indiana paid a fraudulent invoice after attackers impersonated a vendor.
6 stories, newest first · one card per story
DeKalb County, Indiana paid a fraudulent invoice after attackers impersonated a vendor.

Operation Master exploited GlobalProtect CVE-2026-0257, deployed AdaptixC2, and ran large-scale credential theft and invoice fraud.

Criminals exploited a GlobalProtect bypass, stole customer records, and sent 2.4 million fake bills.

A BEC campaign sent over one million fake CEO invoice emails, mostly to US firms, urging ~$50,000 ACH transfers to attacker accounts.

Microsoft tracked a million-message AI-assisted BEC campaign impersonating executives with fake ServiceNow invoices to steal ~$50,000 ACH payments.

Microsoft tracked a campaign of over one million AI-crafted CEO-impersonation emails seeking ~$50,000 ACH payments with fabricated ServiceNow invoices.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views