Bottom line: Organizations must strengthen their ACH payment controls and implement AI-powered threat detection to prevent this type of attack.
What's happening: The campaign, which used AI to generate realistic executive email templates and invoices, targeted finance teams at several large organizations, including IBM, in the United States and the United Kingdom.
What to do: Security leaders should review and update their ACH payment policies and procedures to include AI-powered threat detection and response protocols, and consider using Microsoft's Azure Sentinel and Microsoft 365 Advanced Threat Protection to detect and block suspicious activity.