We have had many clients scammed over the last few months by different tactics, but all involved Proton Mail.
The first scammer was able to infiltrate a vendor’s email and extorted extra funds for “sending extra by mistake.” It appears that anyone who wrote that vendor could have been infected.
Then another hacker is copying the email addresses and menus, with 2 vendors being targeted so far. This is also Protonmail, and the giveaway is that one vendor’s name is misspelled, and both of these...