Yeah, perhaps sending fake invoices to customers? There's a lot of precedent for that:

https://krebsonsecurity.com/2025/07/phishers-target-aviation...