{
 "license": "CC-BY-4.0",
 "attribution": "Fide AI, Agentic Cyber Explorer",
 "url": "https://agentic-cyber-explorer.pages.dev/events/microsoft-ai-assisted-executive-impersonation-fraud-2026/",
 "asOf": "2026-09-26",
 "id": "microsoft-ai-assisted-executive-impersonation-fraud-2026",
 "date": "2026-09-10",
 "datePrecision": "day",
 "title": "Microsoft tracks a million-email invoice-fraud campaign with signs of AI-generated templates",
 "lane": "attack",
 "kind": "misuse-report",
 "summary": "Microsoft reports a campaign between August 3 and 5, 2026 that sent more than a million emails impersonating company executives to push accounts-payable staff toward an ACH payment of nearly $50,000, backed by fabricated invoices and forwarded threads impersonating ServiceNow. Microsoft says the templates showed multiple indicators consistent with generative AI, though these do not establish how much of the content AI produced.",
 "whyItMatters": "It shows indicators of generative AI in a high-volume business email compromise campaign, where the losses per successful email can be large.",
 "actors": [
  "microsoft"
 ],
 "topics": [
  "fraud-and-social-engineering",
  "threat-intelligence"
 ],
 "atlas": [],
 "artifacts": [],
 "sources": [
  {
   "url": "https://www.microsoft.com/en-us/security/blog/2026/09/10/protecting-organizations-ai-assisted-executive-impersonation-invoice-fraud/",
   "publisher": "Microsoft Security",
   "title": "Protecting organizations from AI-assisted executive impersonation and invoice fraud",
   "date": "2026-09-10",
   "type": "primary",
   "accessed": "2026-09-25"
  }
 ],
 "keyFacts": [
  {
   "fact": "87.7% of the emails went to users in the United States.",
   "locator": "Email delivery"
  },
  {
   "fact": "The actor used multiple third-party email service accounts and registered impersonation domains.",
   "locator": "Attack chain overview"
  },
  {
   "fact": "Microsoft describes the evidence of AI use as indicators consistent with generative AI in template creation.",
   "locator": "Introduction"
  }
 ],
 "significance": 3,
 "fideQuestions": [],
 "methods": [],
 "review": "assistant-drafted",
 "addedOn": "2026-09-25"
}