Mumbai cyber police thwart attempt to siphon firm’s ₹20-L payment in man-in-the-middle attack

An MITM attack refers to a cybercrime wherein the attacker hacks into a company’s email account, gathers information about transactions with other firms, and then poses as one of them in order to siphon the money being transacted between the two

The cyber cell at the BKC police station recently thwarted a man-in-the-middle (MITM) attack made on an agriculture trading firm and recovered ₹20 lakh that had been siphoned by the accused.

According to police, the complainant company, based in the city, had sold sprouts to a client company based in Madhya Pradesh. (Photo for representation)

An MITM attack refers to a cybercrime wherein the attacker hacks into a company’s email account, gathers information about transactions with other firms, and then poses as one of them in order to siphon the money being transacted between the two.

According to police, the complainant company, based in the city, had sold sprouts to a client company based in Madhya Pradesh (MP).

On January 17, the city firm emailed the GST invoice to the client and was to receive a payment of ₹20 lakh in return. On January 23, the client made the payment through a bank transfer.

Later that evening, the firm called the client to check on the status of payment. While the client claimed that the money had already been transferred, the company said it did not receive the payment.

Explaining the modus operandi, the officer said, “The accused hacked the email id of the client company. After reading and copying the contents of the invoice sent by the Mumbai-based firm, the accused deleted it. The accused then created a new email id, identical to that of the Mumbai firm.”

“Using the fake email id, the fraudster sent an email to the client company with the same contents, but a different bank account. The money was then transferred by the client into the accused’s bank account,” the officer said.

Officers from the BKC cyber cell have advised the client company to file a complaint with the local police in MP.