Alpha Team Research: New BEC Scams using Kidnapping Lure for Victims

Researchers at ZeroFOX were notified of a BEC scheme involving individuals claiming that they are aware of plans to kidnap the kids of the victim, usually an executive, and that the BEC scammer could assist in preventing this for a sum of money. While kidnapping scams have been around for quite some time, this scam is unique in that the scammers are claiming to have information about the kidnapping as long as you pay them.

Recommendations

Contact law enforcement if you feel this threat is credible or you are worried about you or your family's safety
Be wary of any scam emails that have an egregious call to action like this one. Coordinate with your security department if you receive any email that follows this template

Details

ZeroFOX acquired redacted emails which purported these scams, and reviewed the methods and lures the actors were using to scam their victims. Below is a sample email we received which shows the scammers attempting to be on the side of the victim by offering to help them identify the kidnappers for a sum of $5,000.

“”” //REDACTED//, recently I found out that my friends want to kidnap your daughter to get a ransom. Now they are looking for suitable transport and a place where they will be held hostage.

I would like to prevent this. If you pay me $5,000 I will give you the names and addresses of the kidnappers. And also I will give you an audio recording where they discuss details and you can go to the police with evidence. Please hurry, in a few days they will leave and it will be hard to catch them.

Keep in mind that I would like to remain anonymous so I took security measures and the police or FBI will not be able to find me via email and IP address. “””

These types of scams have been seen for a long time, and typically involve calling the victims and using distressing audio clips to further the claim of someone being kidnapped, in other cases, the threats are portrayed by the attackers themselves and demand money or they will go after family. In this new type of scam, scammers may be trying different methods to get victims to send them money, which according to certain Bitcoin wallets associated with these types of scams, has proved somewhat successful.