Rising Threat of Boss Scams: I4C Issues Advisory to Indian Businesses
| Category | Details |
|---|---|
| Threat Name | "Boss Scam" (CEO Impersonation Fraud) |
| Issuing Authority | Indian Cyber Crime Coordination Centre (I4C) |
| Targets | CEOs, CFOs, finance officers, decision-makers, corporate management teams. |
| Objective | Manipulate employees into unauthorized fund transfers or sharing sensitive data. |
| Attack Method | Exploits trust, hierarchy, and urgency via impersonation. Uses emails, WhatsApp messages, or fake regulatory notifications (e.g., RBI). |
| Malware Delivery | ZIP files containing .exe or .dll files that compromise Windows devices. |
| Key Tactics | Hijacks WhatsApp Web sessions, alters contact details, and sends fraudulent instructions mimicking executives. |