Cosmic Lynx
Cosmic Lynx is a Russia-based BEC cybercriminal organization that has significantly impacted the email threat landscape with sophisticated, high-dollar phishing attacks.
source: misp-galaxy1 refs →
Cosmic Lynx
A Russia-based BEC group targeting global organizations with sophisticated attorney impersonation to initiate large unauthorized wire transfers.
Analyst brief
Cosmic Lynx is a Russia-based BEC cybercriminal group targeting high-value organizations globally, particularly those involved in multinational financial transactions and M&A activities. They employ sophisticated attorney impersonation, executive spoofing, and multi-stage social engineering TTPs to initiate large unauthorized wire transfers. Defenders should focus on detecting and preventing fraudulent legal correspondence among senior executives, enforcing strict email authentication protocols (DMARC, DKIM, SPF), and implementing multi-channel verification processes for significant financial transfers.
unknown
FAQ2
What tactics does the Cosmic Lynx group use to attempt to capture high-value wire transfers?
Cosmic Lynx employs attorney impersonation, executive spoofing, and sophisticated multi-stage social engineering tactics.
What defense measures are recommended against Cosmic Lynx's targeting?
Defenders are advised to enforce strict email authentication protocols such as DMARC, DKIM, and SPF, and to implement multi-channel verification processes for significant financial transfers.
See also6
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.