{"meta":{"database":"Global Social Engineering Impact Database","license":"CC BY 4.0 — attribute to Netarx Social Engineering Incident Database","url":"https://global-social-engineering-impact-da.vercel.app/incidents/2013-rimasauskas-bec-scheme-defrauds-google-and-facebook-of-over-120-million"},"incident":{"title":"Rimasauskas BEC scheme defrauds Google and Facebook of over $120 million","date":"2013","date_precision":"year","victim_org":"Google LLC and Facebook, Inc.","sector":"Technology","country":"United States","primary_vector":"Vendor / Supply Chain Impersonation","secondary_vectors":["Business Email Compromise","Spear Phishing (Email)"],"ai_involvement":"No AI reported","ai_notes":"No AI or synthetic media was reported; the scheme relied on forged paper documents and lookalike corporate identity.","outcomes":["Wire Fraud / Financial Loss"],"loss_usd":120000000,"loss_note":"DOJ states the scheme caused more than $120 million in losses to the two victim companies. Rimasauskas was ordered to forfeit $49,738,559.41 and pay $26,479,079.24 in restitution.","records_affected":null,"threat_actor":"Evaldas Rimasauskas (Lithuanian national) and co-conspirators","summary":"From roughly 2013 to 2015 Evaldas Rimasauskas registered a Latvian company using the same name as Quanta Computer, a genuine Asian hardware supplier to two large U.S. internet companies, and invoiced them for goods and services the real supplier had delivered. Payments totaling more than $120 million were wired to accounts he controlled in Latvia and Cyprus and then laundered through several countries. He was arrested in Lithuania in March 2017, extradited in August 2017, pleaded guilty in March 2019, and was sentenced on December 19, 2019 to five years in prison.","how_it_worked":"The fraud abused the accounts payable relationship between two technology giants and a legitimate Taiwanese hardware manufacturer. Rimasauskas incorporated a shell company bearing the supplier's name in Latvia, opened bank accounts in its name, and sent phishing and invoice emails from addresses designed to look like the supplier's. He supported the requests with forged invoices, contracts and letters carrying counterfeit corporate stamps and executive signatures, which satisfied the victims' vendor verification paperwork. Because the amounts matched real ongoing supplier business, finance staff processed the wires as routine vendor payments, and the funds were quickly moved across Latvian, Cypriot and other accounts.","lessons":"Bank-detail changes for existing suppliers must be verified by callback to a phone number already on file, and payment files should be reconciled against master vendor records rather than against details supplied in the invoice email.","confidence":"Confirmed","sources":[{"title":"Lithuanian Man Sentenced To 5 Years In Prison For Theft Of Over $120 Million In Fraudulent Business Email Compromise Scheme","url":"https://www.justice.gov/usao-sdny/pr/lithuanian-man-sentenced-5-years-prison-theft-over-120-million-fraudulent-business","publisher":"U.S. Department of Justice, S.D.N.Y."},{"title":"Ringleader of Business Email Compromise Scheme Sentenced","url":"https://www.fbi.gov/news/stories/ringleader-of-business-email-compromise-scheme-sentenced-012820","publisher":"Federal Bureau of Investigation"},{"title":"Lithuanian Man Arrested For Theft Of Over $100 Million In Fraudulent Email Compromise Scheme","url":"https://www.justice.gov/usao-sdny/pr/lithuanian-man-arrested-theft-over-100-million-fraudulent-email-compromise-scheme","publisher":"U.S. Department of Justice"},{"title":"Lithuanian Man Sentenced to Prison Over BEC Scheme Targeting Facebook, Google","url":"https://www.securityweek.com/lithuanian-man-sentenced-prison-over-bec-scheme-targeting-facebook-google/","publisher":"SecurityWeek"},{"title":"How this scammer used phishing emails to steal over $100 million from Google and Facebook","url":"https://www.cnbc.com/2019/03/27/phishing-email-scam-stole-100-million-from-facebook-and-google.html","publisher":"CNBC"},{"title":"Lithuanian scammer gets 5 years for defrauding Google, Facebook of $120 million","url":"https://cyberscoop.com/facebook-google-scam-man-sentenced/","publisher":"CyberScoop"}],"entry_type":"incident","slug":"2013-rimasauskas-bec-scheme-defrauds-google-and-facebook-of-over-120-million","year":2013,"loss_kind":"direct_loss","url":"https://global-social-engineering-impact-da.vercel.app/incidents/2013-rimasauskas-bec-scheme-defrauds-google-and-facebook-of-over-120-million"}}