Reported by 2 outlets

Timeline

1. original reporting

   Hackers Pose as Executives and Use Fake NDAs to Steal Corporate Payments

   cyberpress.org · 40d ago · September 3rd, 2026

   Cybercriminals impersonated Gen executives and trusted business advisers in a targeted fraud campaign designed to steal more than €626,000 through a fake corporate acquisition. The campaign, called Phantom Deal, began with a WhatsApp message from a person claiming to be a real Gen executive in Dublin. The attacker used the executive’s name, photograph and an Irish phone number to make the approach appear legitimate. The initial message did not mention money or urgency. Instead, it asked whether the target was available to talk. The recipient, a Gen legal-team employee identified as David, knew the executive being impersonated. He became suspicious because the phone number was unfamiliar. A phone call confirmed the fraud. The caller’s voice did not match the real executive. David continued the conversation as part of a controlled investigation. The attackers then introduced another fake identity, impersonating a real professional connected to PwC. They asked David to use a personal email address and communicate through WhatsApp instead of official company channels. Fake NDAs Drain Corporate Payments The attackers sent a professional-looking non-disclosure agreement, or NDA, branded as a PwC document. The fake document claimed Gen was involved in a confidential acquisition and imposed strict secrecy rules. The NDA instructed David not to discuss the deal internally and to use WhatsApp and personal email for all communication. This was a key part of the fraud. The initial WhatsA

2. update from gbhackers.com

   Fake Acquisition Scam Uses Forged NDAs to Demand €626,000 Corporate Payment.

   gbhackers.com · 40d ago · September 3rd, 2026

   Threat actors impersonated Gen executives and major consulting firms in a targeted business email compromise-style operation that used forged non-disclosure agreements to isolate a legal employee and pressure the company into transferring €626,735.45 to a Hong Kong entity. Dubbed Phantom Deal, the campaign shows how financially motivated actors can abuse legitimate M&A processes, corporate history […] The post Fake Acquisition Scam Uses Forged NDAs to Demand €626,000 Corporate Payment. appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .