A campaign tracked as "Phantom Deal" is targeting large enterprises with fake merger and acquisition scams, according to Dark Reading. The threat actors behind it invest heavily in reconnaissance, studying their targets in extreme detail before making a move. That preparation appears designed to make fraudulent requests look like legitimate M&A activity.
The campaign's focus is on midlevel employees rather than top executives. By impersonating the workflows and communications that surround a real deal, the attackers aim to trick these workers into initiating large financial transfers. The report highlights how business-process knowledge, not just technical intrusion, is central to the scheme.
Because there is only one source, there are no conflicting accounts to weigh. The key takeaway is that organizations should treat unusual financial requests tied to mergers or acquisitions as high-risk, especially when they arrive outside established verification channels.