I work for a financial services company and yesterday I received a calendar invite from my CFO, which is pretty common since I work with him closely. I hopped on the call and noticed he was acting a little weird (his tone was not very friendly and he was doing random small talk), but I ignored it. He asked me to wire $100K into an existing vendor's bank account through our AP system but flagged that he recently had a conversation with them and they switched their bank account last week and he threw in the details in the chat. I freaked out a little bit since this was not normal and I would usually get an email from the vendor in case of such changes. I asked the CFO if he could send me the email for documentation and he said he has it and he can do that later since he is away from his work computer and cannot access emails but pushed to close it out in the same call.
I freaked out a little, acted as if my internet wasn’t working and hung up and immediately called the CEO. He put the CFO on the line, who said he had not planned any call with me, and that is when we realized it was a deepfake call on a spoofed email.
The person literally knew about our vendor and our AP system. Has anyone else experienced something like this? I am seeing something like this for the first time in 10+ years of my career. And now, I am being dragged into IT calls because they want to understand more about the call and whatnot.