The United States Department of the Treasury’s Office of Foreign Assets Control (OFAC) and the Department of Justice this week announced sanctions against six Nigerian nationals for their involvement in business email compromise (BEC) and romance fraud schemes.
The six, namely Richard Uzuh, Micheal Olorunyomi, Alex Ogunshakin, Felix Okpoh, Nnamdi Benson, and Abiola Kayode, engaged in BEC fraud schemes that resulted in American citizens losing over $6 million, the U.S. Treasury says. They impersonated business executives and tricked legitimate businesses into wiring them money, but also stole from others by conducting romance fraud operations.
Using various manipulation tactics, the individuals gained access to usernames, passwords, and bank accounts, in furtherance of the scheme. Some of those who engaged in romance fraud relied on social media and email to boost their social engineering tactics, the U.S. Treasury says.
“As a result of today’s action, all property and interests in property of the designated persons that are in the possession or control of U.S. persons or within or transiting the United States are blocked, and U.S. persons generally are prohibited from dealing with them,” OFAC says.
Between 2015 and 2016, Uzuh and an accomplice engaged in BEC fraud, requesting and receiving funds from victim businesses’ accounts. He would often target over 100 businesses in a single day and his scheme is believed to have caused over $6,300,000 is losses.
From September 2015 to June 2017, Olorunyomi and an accomplice engaged in a romance fraud scheme in which he either obtained funds directly from the victims, or used their bank accounts to funnel fraudulently obtained money. The scheme likely resulted in losses of more than $1 million.
Engaging in both BEC and romance scams, Ogunshakin provided Uzuh and other co-conspirators with bank accounts to receive fraudulent wire transfers, in addition to running his own BEC schemes and assisting Uzuh with the contacting of victim companies.
Okpoh and Benson conducted romance scams and engaged in money laundering (working with Uzuh). Both provided bank accounts used to receive fraudulent wire transfers. While also conducting BEC and romance scams, Kayode too provided U.S. bank accounts to individuals involved in the scheme.
Related: Healthcare, Government Organizations Targeted in BEC Attacks With COVID-19 Lures
Related: Nigerian Threat Actors Specializing in BEC Attacks Continue to Evolve
Related: BEC Losses Surpassed $1.7 Billion in 2019: FBI
Related: Nigerian Cybercrime ‘Group’ Has 400 Malicious Actors
More from Ionut Arghire
- Votiro Raises $11.5 Million to Prevent File-Borne Threats
- Lumen Technologies Hit by Two Cyberattacks
- Leaked Documents Detail Russia’s Cyberwarfare Tools, Including for OT Attacks
- Severe Azure Vulnerability Led to Unauthenticated Remote Code Execution
- 500k Impacted by Data Breach at Debt Buyer NCB
- Chinese Cyberspies Use ‘Melofee’ Linux Malware for Stealthy Attacks
- Microsoft Cloud Vulnerability Led to Bing Search Hijacking, Exposure of Office 365 Data
- OpenAI Patches Account Takeover Vulnerabilities in ChatGPT
Latest News
- Italy Temporarily Blocks ChatGPT Over Privacy Concerns
- FDA Announces New Cybersecurity Requirements for Medical Devices
- Report: Chinese State-Sponsored Hacking Group Highly Active
- Votiro Raises $11.5 Million to Prevent File-Borne Threats
- Lumen Technologies Hit by Two Cyberattacks
- Leaked Documents Detail Russia’s Cyberwarfare Tools, Including for OT Attacks
- Mandiant Investigating 3CX Hack as Evidence Shows Attackers Had Access for Months
- Severe Azure Vulnerability Led to Unauthenticated Remote Code Execution
