"BEC Groups Launch Executive Impersonation Attacks in at Least 13 Languages"

Researchers at Abnormal Security have identified two groups who are using executive impersonation to carry out Business Email Compromise (BEC) attacks in at least 13 different languages. The researchers noted that while attacking targets in multiple regions and using multiple languages are not new tactics, in the past, these operations were typically performed by sophisticated groups with large budgets and resources. Due to the rise of automated translation tools such as Google Translate, threat actors can translate emails into any language they need, with greater ease. Abnormal Security has discovered two groups: Midnight Hedgehog, which engages in payment fraud, and Mandarin Capybara, which conducts payroll diversion attacks. The two groups have launched BEC attack campaigns in Danish, Dutch, Estonian, French, German, Hungarian, Italian, Norwegian, Polish, Portuguese, Spanish, and Swedish. This article continues to discuss the growth in BEC attacks and the launch of BEC campaigns in multiple languages by Midnight Hedgehog and Mandarin Capybara.

SC Media reports "BEC Groups Launch Executive Impersonation Attacks in at Least 13 Languages"