Phantom Deal Campaign Targets Enterprises with Fake M&A Scams

The 'Phantom Deal' campaign is a sophisticated social engineering scheme targeting large enterprises, aiming to trick employees into making significant wire transfers under the pretense of fake merger and acquisition deals. Threat actors meticulously research their targets, identifying key personnel, and impersonate executives via messaging apps like WhatsApp. They leverage real corporate histories, such as the NortonLifeLock acquisition of Avast, to create believable narratives. The campaign has already targeted multiple companies, including Gen, which narrowly avoided a financial loss due to an attentive employee. Attackers also use fabricated non-disclosure agreements from reputable firms like PricewaterhouseCoopers to enhance credibility. The campaign highlights the increasing sophistication of social engineering tactics, posing a significant risk to companies across various sectors. Organizations are advised to reinforce verification processes and payment controls to mitigate these threats. Current status indicates that the campaign is ongoing, with multiple enterprises at risk.

Key Points: • The 'Phantom Deal' campaign targets large enterprises through fake M&A scams. • Attackers impersonate executives and use real corporate histories to create believable narratives. • Companies are advised to enhance verification and payment controls to prevent financial losses.