payment fraud

The payment fraud tag covers reports of business email and messaging-based scams that turn trusted communications into fraudulent transfer requests. Recent coverage focuses on the Boss Scam, where malicious ZIP files infect Windows endpoints and hijack active WhatsApp Web sessions so attackers can impersonate executives. It also examines a reported Microsoft Teams incident in which fraudsters posed as company directors and persuaded finance staff to authorize a large payment. Across these stories, recurring themes include CEO impersonation, malware delivery, session-token theft, urgent payment instructions, mule accounts, and weaknesses in approval and transaction-review processes affecting finance teams, Windows administrators, and Microsoft 365 environments.