Microsoft sees some new wrinkles in invoice-scam emails

Microsoft security researchers identified a campaign of over one million fraudulent emails targeting accounts payable departments. Attackers impersonated executives and the vendor ServiceNow, requesting payments of nearly $50,000. The emails layered fabricated invoice threads and used HTML structures consistent with AI-assisted template development.