Person
person:evaldas_rimasauskas
Lithuanian individual who organized the fraudulent invoice and Business E-mail Compromise scheme.
Lithuanian individual who organized the fraudulent invoice and Business E-mail Compromise scheme.
“A guy named Evaldas Rimasauskas heard that news”
“The Lithuanian authorities arrested Evaldas.”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | USES | social engineering | Explicit | 124 |
| outgoing | USES | Business E-mail Compromise | Explicit | 124 |
| outgoing | USES | lookalike domain | Uncertain | 124 |
| outgoing | USES | money laundering | Explicit | 124 |
| outgoing | USES | WHOIS lookup | Attributed | 124 |
| incoming | INVOLVES | Evaldas Rimasauskas BEC scam | Explicit | 124 |
Evaldas Rimasauskas BEC scam INVOLVES Evaldas Rimasauskas
The incident involved Evaldas Rimasauskas as the person who organized and carried out the scam.
Explicit Confidence 99% · Jack Rhysider EP 124 Details
“Evaldas had his fake invoice, his fake domain, and fake business all set up.”
Evaldas Rimasauskas USES social engineering
Evaldas and his team used social engineering to obtain information from Facebook, Google, and related companies.
Explicit Confidence 98% · Jack Rhysider EP 124 Details
“they had to do it piece by piece and slowly social-engineer their way into the company”
Evaldas Rimasauskas USES Business E-mail Compromise
Evaldas conducted a BEC scam to redirect corporate payments.
Explicit Confidence 99% · Jack Rhysider EP 124 Details
“Evaldas took this a step further, conducting what’s called a BEC scam.”
Evaldas Rimasauskas USES lookalike domain
Evaldas allegedly registered a domain similar to Quanta's domain to make the fraudulent emails appear legitimate.
Uncertain Confidence 86% · Jack Rhysider EP 124 Details
“my guess is he probably registered a domain that was very similar to Quanta’s actual domain”
Evaldas Rimasauskas USES money laundering
Evaldas used a system of moving money through accounts in multiple countries, described as money laundering.
Explicit Confidence 98% · Jack Rhysider EP 124 Details
“he had a whole system to clean the money, too”
Evaldas Rimasauskas USES WHOIS lookup
Investigators could use a WHOIS lookup to identify who registered and controlled the lookalike domain; the episode does not state that Evaldas used the tool himself.
Attributed Confidence 35% · Jack Rhysider EP 124 Details
“To figure that out, you can do a WHOIS lookup on a domain.”