THREAT OPS › Threat News › Protecting organizations from AI-assisted executive impersonation and invoice fraud
Protecting organizations from AI-assisted executive impersonation and invoice fraud
<aside class="table-of-contents-block accordion wp-block-bloginabox-theme-table-of-contents" id="accordion-10825517-7661-44c9-936f-2e4ee783d73c"> <button class="btn btn-collapse" type="button"> <span class="table-of-contents-block__label">In this article</span> <span class="table-of-contents-block__current"></span>
<svg class="table-of-contents-block__arrow" fill="none" height="11" viewBox
MITRE ATT&CK techniques
- Acquire InfrastructureT1583
- Spearphishing AttachmentT1566.001
- Email AccountsT1586.002
- DomainsT1583.001
- Social EngineeringT1684
- MasqueradingT1036
- Email AccountsT1585.002
- Business RelationshipsT1591.002
- Financial TheftT1657
- Spearphishing AttachmentT1598.002
- Gather Victim Org InformationT1591
- PhishingT1566
- Social MediaT1593.001
- Phishing for InformationT1598
- ImpersonationT1684.001
- Establish AccountsT1585
- Spearphishing via ServiceT1566.003
- Acquire InfrastructureAML.T0008
- Generative AIAML.T0016.002
- Establish AccountsAML.T0021
- ImpersonationAML.T0073
- MasqueradingAML.T0074
Indicators of compromise
- https://microsoft.github.io/zerotrustassessment/url
- gomez@service-nowinc.comemail
- notifications@uinsure.co.ukemail
- info@tivityhealth.comemail
- no-reply@lumalisboa.comemail
- noreply@mctci.comemail
- info@nuf.co.jpemail
- info@lohnsteuerhilfe-aktuell-verein.deemail
- info@tovimbatista.ptemail
- contact@eemusicclass.co.ukemail
- info@lifeones.comemail
- domainlify.netdomain