How Cybercriminals Use Phishing and Email Compromise to Steal Freight

Summary

NMFTA explains how criminals use phishing, compromised email and fraudulent carrier identities to reroute freight, and recommends stronger authentication, out-of-band verification and industry-focused security guidance.

Key points

• Criminals use phishing to steal credentials and compromise email accounts belonging to dispatch, customer service or accounting staff.
• From compromised accounts, they can alter shipment details or routing instructions to redirect legitimate loads.
• Another method is registering fraudulent carriers with stolen identification and booking loads through real load boards.
• Small and midsized fleets may be especially exposed because they often have limited security budgets and staff.
• The article recommends phishing-resistant multifactor authentication, out-of-band verification for critical changes, vendor management and email security.
• NMFTA offers a Cargo Crime Reduction Framework, fleet guidebooks and a Freight Fraud Prevention Hub.

MITRE ATT&CK

Countries

Industries