Episode
20 September 2022 Official episode · Official transcript
cybercrime
The episode describes Evaldas Rimasauskas’s Business E-mail Compromise scheme, in which fraudulent Quanta Computer invoices and lookalike domains redirected payments from Facebook and Google, followed by international movement of the stolen funds and an FBI investigation.
Topics: Business E-mail Compromise, social engineering, phishing and spear phishing, lookalike domains and email impersonation, fraudulent invoices and payment redirection, WHOIS domain-registration lookup, international movement of illicit funds, money laundering, wire fraud
Links published on the Darknet Diaries episode page. Not LLM output.
Qualified statements from this episode, not graph facts.
Evaldas Rimasauskas BEC scam INVOLVES Evaldas Rimasauskas
The incident involved Evaldas Rimasauskas as the person who organized and carried out the scam.
Explicit Confidence 99% · Jack Rhysider EP 124 Details
“Evaldas had his fake invoice, his fake domain, and fake business all set up.”
Evaldas Rimasauskas BEC scam TARGETS Facebook
The scam targeted Facebook by diverting payments intended for Quanta into Evaldas's bank account.
Explicit Confidence 99% · Jack Rhysider EP 124 Details
“He put it together and sent the e-mail to the right person at Facebook”
Evaldas Rimasauskas BEC scam TARGETS Google
The scam also targeted Google, which was tricked into sending money to Evaldas instead of Quanta.
Explicit Confidence 99% · Jack Rhysider EP 124 Details
“he was able to trick someone at Google to send him money instead of Quanta”
Evaldas Rimasauskas BEC scam INVOLVES Quanta Computer
The scam impersonated Quanta Computer and redirected payments that were intended for it.
Explicit Confidence 98% · Jack Rhysider EP 124 Details
“he was going to pose as Quanta Computing and issue an invoice to Facebook to pay a bill”
Evaldas Rimasauskas BEC scam INVOLVES Business E-mail Compromise
The scam used what the episode calls a Business E-mail Compromise, or BEC, scam.
Explicit Confidence 99% · Jack Rhysider EP 124 Details
“Evaldas took this a step further, conducting what’s called a BEC scam.”
Evaldas Rimasauskas BEC scam INVOLVES social engineering
The perpetrators used social engineering to gather information about Facebook and Google and their financial processes.
Explicit Confidence 99% · Jack Rhysider EP 124 Details
“they had to do it piece by piece and slowly social-engineer their way into the company”
Evaldas Rimasauskas BEC scam INVOLVES phishing
Jack characterizes BEC as a phishing attack in which the attacker poses as someone known to the victim.
Explicit Confidence 99% · Jack Rhysider EP 124 Details
“BEC is basically a phishing attack, but you’re posing as someone that the victim knows already.”
Evaldas Rimasauskas BEC scam INVOLVES lookalike domain
The perpetrators used a domain made to look similar to Quanta's actual domain.
Explicit Confidence 98% · Jack Rhysider EP 124 Details
“he probably registered a domain that was very similar to Quanta’s actual domain”
Evaldas Rimasauskas BEC scam INVOLVES spoofed e-mails
The scam involved emails made to resemble messages from Quanta and sent to Facebook or Google employees.
Explicit Confidence 90% · Jack Rhysider EP 124 Details
“We’re talking spoofed e-mails, spear phishing, malware attacks”
Evaldas Rimasauskas BEC scam INVOLVES money laundering
The proceeds were moved through multiple bank accounts and countries as part of a money-laundering scheme.
Explicit Confidence 99% · Jack Rhysider EP 124 Details
“Evaldas would just send them fake legal documents that made it look like his money laundering scheme was just normal business dealings.”
Evaldas Rimasauskas BEC scam INVOLVES wire fraud
Evaldas pleaded guilty to wire fraud in connection with the scam.
Explicit Confidence 99% · Jack Rhysider EP 124 Details
“Evaldas pleaded guilty to wire fraud”
Evaldas Rimasauskas USES social engineering
Evaldas and his team used social engineering to obtain information from Facebook, Google, and related companies.
Explicit Confidence 98% · Jack Rhysider EP 124 Details
“they had to do it piece by piece and slowly social-engineer their way into the company”
Evaldas Rimasauskas USES Business E-mail Compromise
Evaldas conducted a BEC scam to redirect corporate payments.
Explicit Confidence 99% · Jack Rhysider EP 124 Details
“Evaldas took this a step further, conducting what’s called a BEC scam.”
Evaldas Rimasauskas USES lookalike domain
Evaldas allegedly registered a domain similar to Quanta's domain to make the fraudulent emails appear legitimate.
Uncertain Confidence 86% · Jack Rhysider EP 124 Details
“my guess is he probably registered a domain that was very similar to Quanta’s actual domain”
Evaldas Rimasauskas USES money laundering
Evaldas used a system of moving money through accounts in multiple countries, described as money laundering.
Explicit Confidence 98% · Jack Rhysider EP 124 Details
“he had a whole system to clean the money, too”
Evaldas Rimasauskas BEC scam INVOLVES Federal Bureau of Investigation
The FBI investigated the scam, froze funds, and gathered evidence after being notified by an employee.
Explicit Confidence 99% · Jack Rhysider EP 124 Details
“the employee notified the FBI, and with millions of dollars stolen, the FBI jumped right into action”
Evaldas Rimasauskas BEC scam INVOLVES Lithuania
The incident involved Lithuania because Evaldas lived there and was arrested by Lithuanian authorities.
Explicit Confidence 99% · Jack Rhysider EP 124 Details
“The Lithuanian authorities arrested Evaldas.”
Evaldas Rimasauskas USES WHOIS lookup
Investigators could use a WHOIS lookup to identify who registered and controlled the lookalike domain; the episode does not state that Evaldas used the tool himself.
Attributed Confidence 35% · Jack Rhysider EP 124 Details
“To figure that out, you can do a WHOIS lookup on a domain.”
Works mentioned in the transcript. Distinct from show-note sources.
Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T07:43:52.508328+00:00