Cyber criminals successfully gained access to email traffic between bankruptcy trustees and Wehkamp – one of the biggest online retailers in The Netherlands – writes RTL Z. Employees of the company unknowingly transferred 144,000 euros to cyber criminals who pretended to be the trustees of a clothing brand the retailer sells on its website.
The clothing brand, called Didi, filed for bankruptcy under Dutch law in January. However, Wehkamp is still selling current collections and sale items of the brand. Proceeds go to Didi’s bankruptcy trustees who will then settle with creditors.
Scammers managed to infiltrate email communications between Wehkamp and the trustees Mid-February, probably using a password previously exposed in a data breach. Upon reading about the large payments the online retailer was making to the trustees, the bad guys spoofed both parties’ email addresses and took over conversation sending very similar emails to the ones that were sent before.
The cyber criminals then introduced a new bank account for paying the instalments, which was verified by Wehkamp using the fraudulent email address. The bad guys were quick to claim the bank account was indeed correct…
Didi’s trustees now hold Wehkamp at least partly responsible for the money that went missing. The online retailer claims it is not responsible, because their systems were ‘not technically hacked’. According to Tweakers, the trustees have already subpoenaed the Dutch retailer.
Here's how it works:
