{"meta":{"database":"Global Social Engineering Impact Database","url":"https://global-social-engineering-impact-da.vercel.app","license":"CC BY 4.0 — attribute to Netarx Social Engineering Incident Database","generated":"2026-08-29T09:22:36.494Z","total":1,"returned":1,"limit":50,"offset":0,"next":null,"note":"Read loss_kind before summing loss_usd: only direct_loss and ransom_paid are comparable. Entries with entry_type \"benchmark\" are aggregate agency statistics and overlap with everything else by construction."},"results":[{"title":"Obinwanne Okeke sentenced to 10 years over $11 million Unatrac BEC fraud","date":"2018-04","date_precision":"month","victim_org":"Unatrac Holding Limited (Caterpillar export sales affiliate)","sector":"Manufacturing","country":"United Kingdom","primary_vector":"Business Email Compromise","secondary_vectors":["Credential Phishing Portal","Spear Phishing (Email)"],"ai_involvement":"No AI reported","ai_notes":"No AI or synthetic media reported.","outcomes":["Wire Fraud / Financial Loss","Credential Theft"],"loss_usd":11000000,"loss_note":"Approximately $11 million in fraudulent transfer requests sent from the compromised CFO account in April 2018; DOJ cited about $11 million in known losses across the wider scheme.","records_affected":null,"threat_actor":"Obinwanne Okeke ('Invictus Obi') and co-conspirators, Nigeria","summary":"Obinwanne Okeke, a Nigerian businessman known as Invictus Obi, was arrested at Dulles Airport in August 2019, pleaded guilty in June 2020 and was sentenced on February 16, 2021 to 10 years in federal prison. Between 2015 and 2019 he ran computer-enabled fraud including a April 2018 attack on Unatrac Holding Limited, the UK export sales office for Caterpillar equipment, where a phished CFO mailbox was used to send about $11 million in fraudulent wire instructions.","how_it_worked":"The crew sent a credential-phishing email to Unatrac's chief financial officer that harvested his Microsoft Office 365 login. With mailbox access, they read pending payment correspondence, then sent roughly fifteen fraudulent transfer requests and payment approvals over eight days in April 2018 that appeared to come directly from the CFO. Fake invoices and altered supplier banking details supported the requests, and finance staff processed them as ordinary executive-approved payments because they arrived from the genuine internal account. Funds were routed to overseas accounts. The company recognized the fraud only after the CFO's mailbox behavior and the missing payments were reconciled in June 2018.","lessons":"Multifactor authentication on executive mailboxes plus monitoring for anomalous mailbox rules and sign-ins would have blocked the takeover that made every downstream approval look authentic.","confidence":"Confirmed","sources":[{"title":"Nigerian National Sentenced to Prison for $11 Million Global Fraud Scheme","url":"https://www.justice.gov/usao-edva/pr/nigerian-national-sentenced-prison-11-million-global-fraud-scheme","publisher":"U.S. Department of Justice, E.D. Va."}],"entry_type":"incident","slug":"2018-obinwanne-okeke-sentenced-to-10-years-over-11-million-unatrac-bec-fraud","year":2018,"loss_kind":"direct_loss","url":"https://global-social-engineering-impact-da.vercel.app/incidents/2018-obinwanne-okeke-sentenced-to-10-years-over-11-million-unatrac-bec-fraud"}]}