Invoice Roulette
Email and other general purpose messaging systems are not special purpose transaction protocols. Finance and accounting processes adopt a range of prophylactic measures to try to reduce the risks of such technologies. However bad actors, whether organized crime, lone-wolves, or increasingly state-supported cadres, interleave their malicious content within legitimate message flows. This places the burden of defence entirely on the message recipient, forcing them to play the odds of whether or not a commercial message is safe or not. We call this invoice roulette.
more ...