Security News > 2020 > November > TMT BEC scammers arrested after compromising 50,000 companies
The tally may be much higher, though as Group-IB established that the TMT gang targeted around 500,000 organizations from the private and government sector in more than 150 countries.
BEC scammers use malware to collect sensitive information like authentication data from browsers, email, and FTP clients.
According to Group-IB, TMT would impersonate legitimate companies in phishing emails purporting to be purchasing orders, product inquiries, and inquiries, and messages related to Covid-19.
The scammers created their messages in the language of the victim, Group-IB says, some samples being written in English, Russian, and Spanish.
According to logs analyzed by the researchers, TMT also used previously compromised inboxes to send out a new set of phishing emails.