Hiding a $50,000 BEC financial fraud in a fake email thread · Blog · Sublime Security

This Attack Spotlight documents a Business Email Compromise (BEC) attempt against a university's Accounts Payable in which attackers constructed a believable fake email thread and attached a counterfeit invoice and W-9 to coerce a $50,000 payment; Sublime's AI-based detection flagged indicators such as a fake thread, an unknown/suspicious sender with a freemail reply-to and abused ".jp" TLD, and engaging fraud language, and prevented the transaction.