Phishers Target Aviation Execs to Scam Customers

KrebsOnSecurity investigates a credential-phishing and invoice-fraud campaign tied to the Nigerian cybercrime group SilverTerrier: attackers phished an executive into a fake Microsoft 365 login, harvested email threads about invoices, created look-alike domains (many registered from [email protected]), and sent modified invoices that resulted in at least one six-figure loss; the report links observed registration patterns to many additional impersonating domains and references mitigation advice including the Financial Fraud Kill Chain.