← Back to Feed
The NDA Was the Payload: Inside Phantom Deal, a Fake Acquisition Fraud Campaign
September 2, 2026 · Gen Digital · Severity: MEDIUM
Attackers posed as executives, moved conversations to WhatsApp and personal email, and forged acquisition documents to set up international wire transfers. When they targeted Gen, researchers played along, exposing a wider M&A scam.
Key Takeaways
- Phantom Deal is a fake acquisition fraud campaign where the NDA itself was the payload, designed to deploy malware on targets' systems.
- Organizations should verify acquisition offers through legitimate channels and treat unsolicited deal documents with security suspicion.
- Organizations should review the full article for complete details and implement relevant security measures.