Attackers will use the panic created by the Silicon Valley Bank (SVB) collapse to target your finance department employees with malware, ransomware, and business email compromise (BEC) attacks.

We urge you to immediately alert your finance team to not open any emails, click on any email attachments, or click on any email links that are not from known, verifiable sources.

Attackers will leverage the dire SVB situation by sending fake emails with malicious attachments and links in an attempt to infect your employees’ machines with malware or ransomware. They will also launch BEC attacks, requesting account changes from seemingly legitimate sources.

Unfortunately, attackers always leverage crisis situations to trick employees into taking actions that lead to malicious infections. Do not fall victim to SVB-based scams!

We strongly recommend that your finance team (and all employees) be extra cautious over the next several weeks with any inbound communication from all sources pertaining to the SVB situation. We also recommend that your security analysts pay very close attention to all alerts generated by your endpoint detection and response (EDR) and extended detection and response (XDR) platforms.