[masraum]

Originally Posted by greglepore

My s/o's part time employer just got an email addressing her by name and requesting that my so's direct deposit be moved to a new bank and provided routing info. Lucklily they didn't spoof the email addy, but they did use her name. Happened not long ago with settlement funds as well-they're a title company-they got email from "seller" changing routing info for several hundred k-luckily the company requires a signed form. Some very sophisticated hack.

I work in IT for a very large bank (one of the largest). Everyone in the bank is required to go through "cyber security" training once per year, and they even send fake "hacking" emails throughout the year to test folks. Most "hacking" is done by searching websites and the Internet for employee names, sending emails and placing calls to the various names. It's not that hard to get names, numbers, emails these days via the Internet (LinkedIn, etc...). And exactly what you describe is always mentioned in our "training".