Researchers have uncovered a new business email compromise (BEC) threat actor, Exaggerated Lion, targeting thousands of U.S. companies with money pilfering scams. The cybercrime ring is unique in its leveraging of Google s cloud-based productivity suite, G Suite, and for its use of physical checks for collecting fraudulent payments as opposed to wire transfers. Unlike other BEC organizations, which are centrally located in Nigeria, the threat group’s primary associates are spread around multiple countries in Africa, including Nigeria, Ghana and Kenya.
Source: https://threatpost.com/cybergang-favors-g-suite-and-physical-checks-for-bec-attacks/153074/