Researchers warn that Cosmic Lynx targets firms that don t use DMARC and uses a mergers and acquisitions pretext that can lead to large sums of money being stolen. The threat group sets itself apart from other run-of-the-mill BEC scams in that it uses extremely well-written emails. The group has hijacked the identities of real attorneys at high-profile U.K.-based law firms to add another layer of legitimacy to their attack. The average amount requested in most BEC attacks is $55,000, researchers said.
Source: https://threatpost.com/russian-bec-gang-cosmic-lynx-uncovered/157166/