← Back to Feed

The NDA Was the Payload: Inside Phantom Deal, a Fake Acquisition Fraud Campaign

September 2, 2026 · Gen Digital · Severity: MEDIUM

Attackers posed as executives, moved conversations to WhatsApp and personal email, and forged acquisition documents to set up international wire transfers. When they targeted Gen, researchers played along, exposing a wider M&A scam.

Key Takeaways

  • Phantom Deal is a fake acquisition fraud campaign where the NDA itself was the payload, designed to deploy malware on targets' systems.
  • Organizations should verify acquisition offers through legitimate channels and treat unsolicited deal documents with security suspicion.
  • Organizations should review the full article for complete details and implement relevant security measures.
☕ Buy a Coffee