A Nigerian national has been arrested for allegedly carrying out attacks on the emails of two US charities, resulting in the theft of more than $7.5 million.
Between June and August 2020 Olusegun Samson Adejorin accessed email accounts without authorization and impersonated employees of these organizations.
As an alleged employee of one of these organizations, Aderojin demanded large sums of money from the other nonprofit organization that provided investment services to the first organization. By taking over the email accounts of employees who had to approve transactions, he was able to make withdrawals of more than $10,000.
To get to the email accounts, Adejorin purchased a tool designed to steal email credentials and obtained fake domains.
Following this scheme, He tricked the first organization into transferring $7.5 million into bank accounts he controlled. while the organization thought it was depositing them into bank accounts of the second organization.
Adejorin now faces a maximum of 20 years in prison for fraud, 5 years for unauthorized access to a protected computer and 2 years for identity theft. For registration and misuse of a domain name, the penalty could be extended by another seven years.