Security News > 2020 > May > Fraudulent Unemployment, COVID-19 Relief Claims Earn BEC Gang Millions

An infamous business email compromise gang has submitted hundreds of fraudulent claims with state-level U.S. unemployment websites and coronavirus relief funds.

Since April 29, Scattered Canary has filed more than 200 fraudulent claims on the online unemployment websites of eight U.S. states; including at least 174 fraudulent claims with the state of Washington and at least 17 fraudulent claims with the state of Massachusetts.

"In addition to the fraudulent unemployment activity against these states, we have also found evidence that links Scattered Canary to previous attacks targeting CARES Act Economic Impact Payments, which were meant to provide relief caused by the COVID-19 pandemic, as well as new scams targeting Hawaii unemployment benefits," Patrick Peterson, founder and CEO of Agari, said in a Tuesday analysis.

The threat group filed at least 82 fraudulent claims for the relief fund between April 15 and April 29, using the Internal Revenue Service-backed relief fund website to process claims from individuals who weren't required to file tax returns.

Based on communications sent to Scattered Canary, researchers said that unemployment claims were eligible to receive up to $790 a week, while the CARES Act includes $600 in Federal Pandemic Unemployment Compensation each week through July 31.

News URL

https://threatpost.com/fraudulent-unemployment-covid-19-relief-claims-earn-bec-gang-millions/155925/