logo

$500K financial fraud built on BEC, a domain lookalike, and a fake thread · Blog · Sublime Security

ID: cdc512e2-7acb-52b7-bf11-88234a1e937e

STIX ID: report--cdc512e2-7acb-52b7-bf11-88234a1e937e

Feed Name: Sublime Security Blog

Threat Score
65/100

Date Published: 2026-02-18

Date Updated: 2026-05-01

...
...

Sublime describes an in-the-wild BEC/fraud attempt where attackers leveraged a stolen vendor thread and a lookalike domain (ascentshvac.com vs ascenthvac.com) to request updated ACH details and attempt to divert a $500K invoice; Sublime's AI detections (lookalike domain, newly registered domain, fake thread, urgency language) prevented the attack.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.