New Phishing Attack Targeting Corporate Internet Banking Users

A sophisticated phishing scam has surfaced in Japan, targeting corporate internet banking users.

This attack, which has rapidly gained attention nationwide, involves fraudsters impersonating bank representatives to deceive victims into providing sensitive banking information.

The attack begins with a phone call from individuals pretending to be bank officials. These imposters inform unsuspecting victims that their Internet banking certificates have expired, a claim designed to create a sense of urgency and panic.

Under the guise of rectifying this issue, they solicit personal information from the victims, including crucial banking credentials.  

Analyze cyber threats with ANYRUN's powerful sandbox. Black Friday Deals : Get up to 3 Free Licenses.

A recent tweet from HackManac shared that the nationwide phishing scam targeting corporate internet banking users has been reported in Japan.

Exploitation Details

Following this initial contact, victims receive phishing emails containing malicious links. These emails are designed to look legitimate and are crafted to coax recipients into clicking the links, which redirect them to fake websites resembling official banking portals.

Once victims enter their credentials, including passwords and one-time passcodes, these details are harvested by the attackers.

With the stolen credentials in hand, the fraudsters proceed to access the victims’ bank accounts.

The ultimate goal is to transfer funds from the victims’ accounts to unrelated corporate accounts controlled by the attackers. This highly organized scheme poses a significant threat to corporate banking users, potentially leading to substantial financial losses.

Japanese cybersecurity researcher, @piyokango, has been actively monitoring this phishing campaign.

In a recent post, he shared a diagram illustrating the entire process, from initial contact to the unauthorized transfer of funds.

The diagram underscores the meticulous planning behind this scam, highlighting the need for heightened vigilance among Internet banking users.

In response to this threat, banks and cybersecurity experts in Japan have issued urgent warnings to corporate clients.

Users are advised to verify any unusual communication purportedly from their banks and to avoid clicking on suspicious email links.

Implementing multi-factor authentication and regularly updating security settings are also recommended to enhance protection against such phishing attempts.

Corporations must remain vigilant and proactive in safeguarding their financial assets against these evolving cyber threats.

Leveraging 2024 MITRE ATT&CK Results for SME & MSP Cybersecurity Leaders – Attend Free Webinar