In last week’s episode, WSVN Sunbeam Television alerted legitimate clients that a phising attacker had succeeded in getting a client data set including client email/phone and account balance information. And now, I have received an email from the attackers, attempting to divert legitimate payments from WSVN Sunbeam to the attackers @WSVLN.com:

FROM: Suehayes Rosado srosado@wsvln.com

CC: Rodney Bacher <rbacher@wsvln.com>, Nadine Mitchell <nmitchell@wsvln.com>, Judy Matalon <jmatalon@wsvln.com>, Laura Escardo <lescardo@wsvln.com>, Vivian Crews <vcrews@wsvln.com>, Jessica Bova <jbova@wsvln.com>, Josiane Dalmau <jdalmau@wsvln.com>

Attn: Accounts Payable Manager:

WSVN-TVSunbeam Television Corp, (“WSVN”) greatly appreciates you as a valued customer and we want to thank you for your continued business.

Our office will like to update our Bank Account information details you have on file

Please note, Mailing of check payments has been temporarily put on hold for now until further notice, All payments has to go through Direct Deposit ACH payment and Wire transfer

Could you please check if you have any open invoice payable to us as accounting is still not able to get onto the server or into Oracle to review accounts or post payments that may have been received.

Best Regards
Sue