Back to School: BEC Group Targets Teachers with Payroll Diversion Attacks

Discover how threat group Chiffon Herring leverages impersonation and spoofed email addresses to divert paychecks to mule accounts.

Crane Hassold

September 13, 2022

Placeholder

adleymarcc565[@]gmail[.]com

bankroll630[@]gmail[.]com

barbara.hiring[@]gmail[.]com

briannanicholas81[@]gmail[.]com

caseybrown847[@]gmail[.]com

deloreschapman6[@]gmail[.]com

directtdepositoffice00[@]email[.]com

gatekelvin2229[@]gmail[.]com

ginalocker9[@]gmail[.]com

godchoice088[@]gmail[.]com

gtaylor9833[@]gmail[.]com

hellen.brown18[@]yahoo[.]com

jilllain777[@]gmail[.]com

johnrazoo820[@]gmail[.]com

kathygros1313[@]gmail[.]com

larryeppler8[@]gmail[.]com

laurastiles1010[@]gmail[.]com

laureljames750[@]gmail[.]com

luigi.cuneo45[@]gmail[.]com

mariastewart314[@]gmail[.]com

mathgradee[@]gmail[.]com

meetfish59[@]gmail[.]com

michealfought21[@]gmail[.]com

msadwick1[@]gmail[.]com

mydirecttdeposittofffice[@]mail[.]com

officeink[@]mail[.]com

payrollnetwork20[@]gmail[.]com

randal200lo[@]gmail[.]com

replydirectmail[@]gmail[.]com

roselynnbrandon[@]gmail[.]com

sadwicksandra[@]gmail[.]com

shelbybilby2[@]gmail[.]com

smithanderson027[@]gmail[.]com

sodibambam[@]yahoo[.]com

steverosewoodautomotive[@]gmail[.]com

sureska57[@]mail[.]com

tj602432[@]gmail[.]com

traymond231[@]gmail[.]com

wdoris938[@]gmail[.]com

whelane28[@]gmail[.]com

williamssamuel1232[@]gmail[.]com

williamssarah3213[@]gmail[.]com

Related Posts

Blog Thumbnail
Inside Abnormal's Behavioral AI: Moving Beyond Rules in Email Security

December 30, 2025

See Abnormal in Action

Get a Demo

Get the Latest Email Security Insights

Subscribe to our newsletter to receive updates on the latest attacks and new trends in the email threat landscape.

Loading...