> "My accountant was called on Friday morning," she tells the BBC. "Someone said: 'You're going to get an email from the president, and she's going to give you instructions to conduct a very confidential transaction and you're going to have to respond to whatever instructions she gives you'."
This should have thrown up so many red flags for anyone. Crazy.
A phone call from a stranger and an email from an account that has her name in it... it was probably CEO@imstealingyourmoney.ru
This is a serious question just as a FYI.
ETA: I think some slight variations on the domain name could also be filtered out completely, but I'd guess it would be hard to catch all of those that it is difficult to visually detect without also filtering legitimate mail.
I've seen an email like this aimed at the company I work for and it was something like ceo@yourrcompany.com (just one letter was doubled from the real domain).
Conpany vs Company
Which just demonstrates how easy it is to get this past people.
PS: That or you where just assuming that was an error on my part ops. I did briefly correct it before realizing it was a better example.