From the Phishing Archives: Just How Far Will Cybercriminals Go for a Scam? Apparently into Outer Space.

Stu Sjouwerman | Jul 12, 2018

The Nigerian Prince scam was found taking a turn upwards to the stars, seeking your help to bring a poor lonely astronaut home.

Untitled 7

It seems the most well-known email scam around was reborn in recent years with a new twist: it’s not a prince that needs your help, it’s a stranded astronaut. A scam definitely to be placed in the “are you flippin’ kidding me?” file, I couldn’t help but laugh at the absurdity of the scam’s premise:

  • Nigerian Astronaut, Air Force Major Abacha Tunde has been stranded on a secret Soviet space station since 1990
  • He needs $3M to be brought home and, somehow (on a Nigerian astronaut’s salary, no doubt), he’s amassed over the last 28 years $15M in salary. For those of you doing the math, Major Tunde makes over $500K annually! Not too shabby.

The remainder of the scam follows the traditional format – we send you the entirety of the larger sum, you keep a percentage, and send us back the rest. No doubt, there will be some bank fee that will need to be paid (by the victim) at some point during the scam.

While the basic scam is so old, it’s unlikely that anyone today would fall for it, it’s a reminder that cybercriminals have exponentially improved their game in only a matter of 2-3 years. The poorly-written, badly-formatted emails now look like the real thing. Their timing, context, sender detail, and domain are often spot on, causing even the savviest of user to fall victim.

So, while your organization’s security awareness program may not need to cover Nigerian astronauts as part of its most current training, it does need to convey to your users that scammers will stop at nothing to trick your users into making them an unwitting accomplice in a data breach.

Topics: Phishing

Secure the Digital Workforce: Human + AI

KnowBe4 empowers the modern workforce to make smarter security decisions every day. Trusted by more than 70,000 organizations worldwide, KnowBe4 is the pioneer of digital workforce security, securing both AI agents and humans. The KnowBe4 Platform provides attack simulation and training, collaboration security, and agent security powered by AIDA (Artificial Intelligence Defense Agents) and a proprietary Risk Score. The platform leverages 15 years of behavioral data to combat advanced threats including social engineering, prompt injection, and shadow AI. By securing humans and agents, KnowBe4 leads the industry in workforce trust and defense.