Large Enterprises Targeted in Fake Merger & Acquisition Scams

A sophisticated cyberattack campaign dubbed 'Phantom Deal' is currently targeting large enterprises by leveraging highly detailed research on corporate structures. Threat actors are meticulously studying companies to impersonate executives and initiate fraudulent financial transfers. By exploiting the complexity of real-world merger and acquisition processes, attackers convince midlevel employees that a secret deal is underway, pressuring them to bypass standard security protocols to move large sums of money. Security researchers warn that the level of detail in these social engineering attempts makes them particularly dangerous, as they mimic legitimate corporate communication styles and internal workflows. Organizations are urged to implement stricter verification procedures for high-value financial transactions and to conduct specialized training for employees involved in sensitive corporate operations to recognize the signs of these elaborate business email compromise (BEC) schemes.