Another good reason to deploy MFA and increase Awareness Training / Phishing exercises - Researchers from Agari who discovered the operation — dubbed Cosmic Lynx — claim that this is the first-ever reported case of a Russian cybercriminal outfit running an organized BEC phishing scam.

https://www.scmagazine.com/home/security-news/cybercrime/bec-scams-grow-in-complexity-as-russian-actors-launch-cosmic-lynx-operation/