Scripted Sparrow Uses Automation to Generate and Send their Attack Messages

Scripted Sparrow is a prolific Business Email Compromise (BEC) group running large-scale, automated phishing campaigns across multiple continents by impersonating executive coaching/leadership consultancies and sending spoofed reply-chain emails with fraudulent invoices (commonly $49,927) and W-9 forms to Accounts Payable; they use evasion tactics such as omitting attachments to coax replies, geolocation/browser spoofing, and programmatic PDF generation (Skia) to scale and bypass defenses.