Eneya Dania and Osariemen Isibor Sentenced For Spearphishing Email Scheme in US
Two Nigerians Eneye Dania, 31 and Osariemen Isibor, 32 were to 17 months and 14 months in prison respectively by Chief United States District Judge Geoffrey Crawford for the District of Vermont in the United States of America for their role in a conspiracy to steal personal financial information from employees of local governments, including the State of Vermont.
Following the completion of their sentences, both men are expected to be removed from the United States and returned to Nigeria.
The conspiracy involved sending employees of local governments, colleges, and universities, “spearphishing” emails designed to look like they were sent by the employer’s human resources departments. The emails advised the employee to click on a link to log into the employer’s human resources webpage in order to access payroll and tax withholding data. Rather than connecting the employee to the employer’s HR webpage, however, the employee was sent to a page operated by members of the conspiracy. When employees attempted to log on with their usernames and passwords, those log on credentials were captured by members of the conspiracy. Using those credentials, members of the conspiracy accessed the employees’ real data, and attempted to file fake tax returns on behalf of the employee, with the hope of receiving a fraudulent tax refund. The IRS detected most of the fraudulent tax filings before refunds issued.
In Court filings, the United States Attorney emphasized that both men participated in the crime while more than 5,000 miles away, in Nigeria, then traveled to the United States after participating in this scheme, apparently unaware that the Federal Bureau of Investigation Cyber Agents were on their case.
The case was investigated by Vermont-based cyber agents of the FBI Albany Cyber Task Force, and the Criminal Investigations division of the Internal Revenue Service, also located in Vermont.