publishing date icon
March 31, 2023
read time icon
5 min. read

SAP Concur impersonation attack tricks employees with a fake “report pending approval” notification

Author image
Threat Analyst Team
Post hero image

In the world of cybersecurity, there is no shortage of threats that individuals and organizations must be aware of. From phishing campaigns to malware attacks, it seems that the bad actors behind these threats are always finding new and innovative ways to exploit unsuspecting victims.

One such threat that has recently come to our attention is an SAP alert impersonation that utilizes a realistic-looking template to trick users into clicking on a malicious link. This campaign is particularly dangerous, as it is designed to steal the user's login credentials when entered into the fake SAP report.

What makes this threat even more insidious is the fact that the 'From' field has been spoofed to show the email originating from Concur Solutions, a legitimate company. This is a clear indication that the phishers behind this campaign are using advanced tactics to trick users into falling for their trap.

If you receive an email claiming to be from SAP, it's important to be extra cautious. Always take the time to carefully review the email and verify that it's legitimate before clicking on any links or downloading any attachments. If you're unsure, it's always best to err on the side of caution and delete the email.

In conclusion, this latest SAP alert impersonation campaign is just one example of the many threats that individuals and organizations face in the digital age. By remaining vigilant and taking proactive steps to protect yourself, you can help ensure that your personal information remains safe and secure. So stay alert and don't let the phishers fool you!

Subscribe to All Things Human Risk

Subscribe to our newsletter for a curated digest of the latest news, articles, and resources on human risk and evolving phishing threats in the ever-changing landscape.

Hoxhunt needs the contact information you provide to us to contact you about our products and services. You may unsubscribe from these communications at anytime. For information on how to unsubscribe, as well as our privacy practices and commitment to protecting your privacy, check out our Privacy Policy.