Important Announcement about Fraudulent Emails and Internet Spam
To Whom It May Concern,
We are putting up this notice to make you aware of a serious matter that has been brought to our attention. We are aware that there have been several recent attempts to impersonate Kemia’s key executives over email. These communications often attached malicious files to encourage people to open them or ask for invoice payment.
This practice is known as Business Email Compromise (BEC).
A BEC is an email-based fraud technique that is designed to gain access to critical business information or extract money through fraudulent requests for payment or wire transfers. The most common method used by BEC attackers is the impersonation of a company’s CEO, business partner, or a known contact of the victim, using a spoofed email account to send the request. There have also been instances of BEC that utilized compromised employees’ enterprise email accounts. Email accounts can be compromised through a variety of ways including phishing attacks, the utilization of data from past data breaches and credential dumps to perform credential stuffing attacks, as well as the harvesting of possible account information of victims from social media platforms.
As more businesses go online, cybercriminals have more opportunities to launch BEC attacks and other cybercrimes. Cybercriminals are also adept at changing their social engineering schemes to reflect current events. As enterprises are the primary targets for such scams, do be vigilant and take precautionary measures to guard against BEC attacks.
Always double-check the email address before opening any attachments or clicking on any links within the email as they may be compromised.