Red Alert: Massive cyber wire fraud attacks on US Companies

TrustedSec is reporting an active, high-success wire fraud campaign targeting U.S. companies (especially those with international ties) in which attackers compromise vendor/invoicing email accounts or register lookalike domains, then use email spoofing, forged letterhead/signatures and sophisticated phone social engineering to coerce accounts payable into wiring funds. Losses reported range from $50,000 to $1,000,000 and the group is described as organized, persistent, and technically/socially sophisticated; organizations are advised to verify transactions, harden vendor controls, and notify law enforcement if victimized.