Florentine Banker: The Florentine Banker threat group managed to steal 600,000 British pounds from three large financial institutions in Britain and Israel, according to researchers at Checkpoint Security. The Business Email Compromise (BEC) attack began with attackers targeting the CEO, CFO, and other individuals in the organization. The original attack focused on stealing the credentials of these individuals for the attackers to gain access to their email accounts by sending an email with a fake Office 365 message. Once the email accounts were accessed, the threat actors read and analyzed the emails, moving ones that interested them into a folder under their control. After the emails were analyzed, the group began creating lookalike domains for entities which they believed they could impersonate and sent fraudulent emails to trick bank employees into sending wire transfers to bank accounts controlled by money mules working for the attackers.