Conversation

Notices

How a simple domain misspelling cost an Ohio city $722,000 in a cyberheist

Cyber criminals contacted the city by email and impersonated Pepper Construction Group, which the city has been working with. They requested a $722k bank wire payment. The domain and request looked real except the domain name was misspelled with the u and c being swapped in the word construction to make "constrcution." The city paid the email invoice.