Hackers Can Weaponize Microsoft Copilot to Hijack CEO Accounts and Redirect Wire Transfers

Cybersecuritynews •Guru Baran • August 4, 2026

A new proof-of-concept reveals how attackers can turn Microsoft Copilot, the AI assistant embedded in Microsoft 365, into an unwitting accomplice for business email compromise (BEC) and large-scale wire fraud. The demonstration shows that a single compromised employee account can escalate, with alarming speed, into full CEO account takeover and the theft of a quarter […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft Copilot Accounts Compromised for CEO Impersonation and Fraud A proof-of-concept by Barracuda’s Red Team has shown that compromised Microsoft 365 accounts with Copilot access can facilitate business email compromise (BEC). Attackers can impersonate CEOs, leading to significant financial theft, exemplified by a $247,500 wire transfer. The research, published on August 4, 2026, highlights the rapid escalation from a single compromised employee account to a full CEO account takeover. This vulnerability poses a serious risk to organizations using Microsoft 365, particularly those relying on AI tools like Copilot for email management. The incident underscores the need for enhanced security measures to protect high-level accounts from unauthorized access. 2 sources 65

Extracted Entities

Hackers Can Weaponize Microsoft Copilot to Hijack CEO Accounts and Redirect Wire Transfers

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (2)

Platforms (2)