A man posing as an Asian computer hardware manufacturer has been arrested in Lithuania and charged with conning two large US technology firms into making payments worth more than $100m.
Evaldas Rimasauskas, 48, is said to have fooled the two unnamed US firms between 2013 and 2015. The US Department of Justice (DoJ) said that he set up a Latvian company and several bank accounts – in Latvia, Cyprus, Slovakia, Lithuania, Hungary, and Hong Kong – using the same name as a known Asian supplier.
“Fraudulent phishing emails were sent to employees and agents of the victim companies, which regularly conducted multimillion-dollar transactions with [the Asian] company,” the DoJ said in a statement.
One company is described as “a multinational technology company” while the other is said to be “a multinational online social media company”.
Rimasauskas is said to have forged invoices, contracts, and letters that were made to appear as though they had been executed and signed by executives and agents of the victim companies, submitting them to the banks he used in support of the huge wire transfers.
“This case should serve as a wake-up call to all companies – even the most sophisticated – that they too can be victims of phishing attacks by cyber criminals. And this arrest should serve as a warning to all cyber criminals that we will work to track them down, wherever they are, to hold them accountable,” the DoJ said.
Much of the stolen money has been recovered, apparently helped by the fact that the victim companies and their banks came forward promptly when they discovered the sting. The DoJ would not comment on its plans for securing the fraudster’s extradition, said the BBC.