[edm0nd]

It's all about spray and pray aka sending volume.

We had a sales woman fall for it. The email said from our CEO that said he was at a conference and needed her to go out and buy 10 $100 Visa gift cards and send him the numbers bc he wanted to use them as giveaways.

The issue is that our CEO actually WAS at a conference on that day!

She actually went to the closest CVS and bought them and thankfully mentioned something about it to me when she got back. I paused for a moment and then was like wait a second how did you hear about this request? Email only? so I called our CEO to confirm. Was able to go back to CVS and get them all refunded and the scammer got nothing.

But, that being said, I can see how people fall for it. Employee and user training and awareness are key to prevent these types of things.