eCriminals Share Ways to Impersonate School Staff to Steal Paychecks

Originally published by CrowdStrike. From October 2022 through the summer of 2023, CrowdStrike observed a significant and steady increase in various eCrime threat actors discussing conducting payroll business email compromise (BEC), including specific mentions of targeting U.S.-based private schools. Payroll BEC is a shorter, simpler fraud technique than traditional BEC. This technique involves threat actors contacting an organization’s payroll department while impersonating an employee in an...

bec business business email compromise compromise crowdstrike email email compromise fraud october payroll private school schools share staff steal summer targeting threat threat actors