Social Engineering · Incident Response · Incident Response
WhatsApp Business account takeover · fake IBAN sent to 47 customers, 312K TL fraud
Monday 08:14 · a textile exporter with 47 employees. The WhatsApp Business account was hijacked via an OTP transfer attack. The attacker is messaging 280 customers 'the IBAN has changed.' 12 fraudulent transfers are complete. You will make 11 critical decisions in sequence.
Before you start the scenario
- You are the decision-maker in this incident · every choice leaves time/cost/reputation behind
- There are no wrong answers · just like in real life · but some paths are more expensive
- You can restart it anytime · try different paths
- At the end, a 3-axis score + alternative routes are shown