Protecting Organizations From AI-Assisted Executive Impersonation and Invoice Fraud
Microsoft, Thursday, September 10th, 2026
Over a million emails targeting finance teams with AI-generated executive impersonation and fake ServiceNow invoices.
Microsoft details an AI-powered business email compromise campaign aimed at finance teams, using executive impersonation and fraudulent invoices requesting ACH payments of roughly 50,000 dollars each.
The actors sent over one million emails through third-party infrastructure, with 87.7 percent targeting US entities.
The campaign combined AI-generated email templates, fabricated ServiceNow invoices and spoofed executive communications to build credibility.
The invoice fabrication is the notable escalation, since finance teams trained to verify requests against a system of record now face convincing forgeries of that record.