Nigerian hacker arrested for stealing $7.5M from charities

A Nigerian national was arrested and federally indicted for a business email compromise (BEC) scheme that used stolen credentials, a credential-harvesting tool, spoofed domains, and mailbox manipulation to impersonate employees and trick two U.S. charities into transferring $7.5M to attacker-controlled accounts; the report details charges, potential sentences, and recommended defenses (MFA, email filtering, and out-of-band verification).