On Tuesday, Microsoft published a series of posts to Twitter warning of a visible uptick in BEC attacks targeting K-12 school teachers. This time, the operators behind the BEC attacks are impersonating teachers’ colleagues with gift-card themed emails.
The fake profiles are created using publicly available information, likely harvested from school websites or social media platforms. This process makes the BEC emails far more sophisticated and convincing.