DFIR 14 Sep 2024
One letter off: how a look-alike domain and a stolen signature ran a 30-day invoice fraud
A new analyst, a trusted client, and an email that arrived at 5:45 on a Monday morning. The story of a business email compromise that turned on a single swapped character — and the forensic trail that survived a year of silence and a lawyer's denial.
By Cyberange DFIR Team