With new translation tools like Google Translate, threat actors can translate a phishing email into any language, so it sounds authentic and pull off a business email compromise attack. Companies should put procedures in place to verify outgoing payments and payroll updates.
It used to be that one of the sure ways to identify a phishing email was to notice grammatical errors or broken English in the text of the communication. Thanks to new translation tools.
BEC gangs Midnight Hedgehog and Mandarin Capybara show how online marketing and translation tools are making it easy for these threat groups to scale internationally.
Once the domain of sophisticated attackers, the availability of automated translation tools lowers the barrier-of-entry to wage the financially destructive business email compromise (BEC) attacks.
The threat actors extensively research their target’s responsibilities and relationship with the CEO and create spoofed email accounts that look like the real ones.