Zephyr Energy Loses $1M in Sophisticated Payment Redirection Scam

A recent cyber fraud incident has left UK-based energy firm Zephyr Energy significantly out of pocket. According to Cyber Threat Intelligence, the company fell victim to a payment redirection attack, resulting in a staggering loss of approximately $1 million. This type of attack typically involves tricking an organization into altering payment details for legitimate invoices, rerouting funds to the attacker’s accounts.

The sophisticated nature of this scam highlights the persistent threat of business email compromise (BEC) and its evolving tactics. Cyber Threat Intelligence’s reporting indicates that attackers successfully impersonated legitimate entities, manipulating Zephyr Energy’s financial processes. This incident serves as a stark reminder that even established companies are prime targets for financially motivated cybercriminals who exploit human trust and established business workflows.