Fake Acquisition Scam Uses Forged NDAs to Demand €626,000 Corporate Payment.

Gbhackers •Mayura Kathir • September 3, 2026

Threat actors impersonated Gen executives and major consulting firms in a targeted business email compromise-style operation that used forged non-disclosure agreements to isolate a legal employee and pressure the company into transferring €626,735.45 to a Hong Kong entity. Dubbed Phantom Deal, the campaign shows how financially motivated actors can abuse legitimate M&A processes, corporate history […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Phantom Deal Scam Targets Corporations with Fake NDAs Cybercriminals executed a scam called Phantom Deal, impersonating executives and consulting firms to pressure a legal employee into transferring €626,735.45 to a Hong Kong entity. The attack utilized forged non-disclosure agreements and began with a convincing WhatsApp message from someone posing as a known executive. This tactic exploited corporate communication channels and safeguards, leading to a significant financial loss for the victimized company. The operation highlights vulnerabilities in corporate acquisition processes and the potential for financial exploitation by threat actors. As of now, the incident is under investigation, and organizations are advised to enhance their verification protocols for financial transactions. 2 sources 65

Extracted Entities

Fake Acquisition Scam Uses Forged NDAs to Demand €626,000 Corporate Payment.

The full story

Extracted Entities

Attack Types (1)

Campaigns (1)

MITRE ATT&CK (1)