The article describes a real business email compromise (BEC) attempt against a small community sports club, where an attacker impersonated a superior and requested an urgent payment. It explains how attackers can use AI to automate the research and message-writing steps, making it easier to target many smaller victims. It also highlights practical disruption points: email controls, AI-provider detection, and stricter payment verification processes.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
“Hi, can you make an urgent payment today? Please treat this as a priority.” That hit a tiny community sports club’s inbox. This wasn’t a one-off. With AI, someone can scrape small clubs, charities, and teams, clone leaders’ writing style, and blast out these boss-impersonation payment emails at scale. In the real case, the treasurer caught it because the tone felt off and it skipped normal steps, no purchase order, just hurry up and pay this new bank account. Your move: any urgent payment request from a “boss” in email is high-risk, pause, and confirm it using a known channel, like calling their usual number before you pay.
Cisco Talos reported a real-time phishing framework called “JWR” that guides victims through fake checkout and login pages while attackers watch keystrokes live. It is being delivered through SMS messages that impersonate toll and postal authorities, and it can capture payment details, identity…
Researchers tied North Korea’s Lazarus Group to a real-world campaign that approaches professionals with convincing fake recruiter outreach and job offers. Victims are tricked into opening a malicious PDF or installing a fake PDF viewer from lookalike websites, which then installs backdoors and can…
The article reports real-world social engineering operations, including a hotel Wi‑Fi campaign that pushed fake updates and device-code phishing to steal Microsoft 365 access. It also describes an alleged Microsoft Entra vishing campaign tied to data theft claims at Brinks Home, reinforcing the…
Researchers describe an active, widespread email campaign that tricks employees with voicemail-themed messages and steals Microsoft 365 login sessions (including MFA codes). After taking over accounts, attackers quietly search and collect payroll/HR/finance emails and identify people involved in…
Research from Cisco Talos and CrowdStrike says criminals are building AI into everyday operations, from writing malicious code to scaling fraud infrastructure. The reports describe real prompt logs where attackers use simple “authorized testing” claims to trick AI tools into helping them, plus…
Barracuda researchers simulated how an attacker who already compromised one employee mailbox could use the account’s built-in email AI assistant to hide evidence, learn org context, and draft convincing internal phishing emails. In their proof of concept, the attacker used an invoice-themed link to…
