Provides an in-depth cybersecurity perspective on whaling attacks, combining threat intelligence, incident case studies, and organizational defense strategies. Covers email authentication protocols, executive awareness training, and layered security controls designed to detect and neutralize whaling campaigns before they succeed.
posts
The CFO Who Wired $25 Million to a Threat Actor In early 2024, a finance worker at engineering firm Arup was tricked into transferring $25 million after attending a video call with what appeared to be the company's CFO and other colleagues. Every person on that call was
A Single Email Cost This Company $47 Million In 2016, Austrian aerospace manufacturer FACC lost €42 million (roughly $47 million) after attackers impersonated the CEO via email and convinced a finance employee to transfer funds for a fake acquisition. The CEO and CFO were both fired. The company's
The $47 Million Email That Fooled a Fortune 500 CFO In 2016, an Austrian aerospace company called FACC lost €42 million (roughly $47 million USD) because a threat actor impersonated the CEO in an email to the finance department. The message requested an urgent wire transfer for a fake acquisition
In 2016, an employee at Austrian aerospace firm FACC wired $47 million to a bank account controlled by criminals — because an email that looked like it came from the CEO told them to. The CEO was fired. The CFO was fired. The company's stock tanked. That single email
The CEO Who Wired $17 Million to a Criminal In 2016, an executive at Austrian aerospace parts manufacturer FACC received what appeared to be a routine email from the company's CEO. The message instructed a wire transfer of approximately €42 million — roughly $47 million — to accounts controlled by
A Single Email Cost This Company $46.7 Million In 2015, Ubiquiti Networks disclosed that threat actors impersonated senior executives and tricked employees into wiring $46.7 million to overseas accounts. The attackers didn't exploit a software vulnerability. They didn't deploy ransomware. They sent emails — carefully
