Finance boss at Te Wananga o Aotearoa falls for 'whaling' scam

Jim Mather, centre, head of Te Wananga o Aotearoa, was caught up in a "whaling" scam.
Waikato Times

Jim Mather, centre, head of Te Wananga o Aotearoa, was caught up in a "whaling" scam.

The tertiary institute has enlisted Hong Kong authorities to repatriate more than $100,000 sent to offshore fraudsters.

The chief financial officer of one of New Zealand's largest learning institutions has left her job after falling for an email "whaling" scam.

The executive director of finance at Te Wananga o Aotearoa, Bronwyn Koroheke, transferred $US79,000 ($118,000) to an offshore bank account after receiving an email which appeared to be from her chief executive Jim Mather telling her to send the money.

Bronwyn Koroheke, who fell victim to a "whaling" email scam.

Bronwyn Koroheke, who fell victim to a "whaling" email scam.

In fact the email was from Chinese-based fraudsters running a whaling scam, so-called because it targets an organisation's top executives, or "big fish". They forged Mather's email address to make it look like he was sending it from a mobile device.

The scammers have been targeting New Zealand companies in recent months, prompting a warning in September from Internal Affairs for organisations to be vigilant.

It's one of the largest amounts of money sent from a New Zealand organisation to offshore email scammers.

Kiwi finance bosses have fallen for 'spoofed' emails from bosses, MPA believes
Big wananga snubs Maori king's controversial appointee
Former wananga head drops lawsuit against old empire

Koroheke agreed to resign after the incident but her supporters say she has been treated unfairly as the wananga's systems weren't capable of picking up cyber attacks.

Koroheke oversaw annual revenues of $155 million at the wananga, the second biggest tertiary institution with 32,000 students at campuses around the country.

The wananga was forced to restructure after a series of scandals and financial problems a decade ago, an Auditor-General's report finding contracts worth milllions were awarded to members of founder Rongo Wetere's family.

Ad Feedback

Mather, long-serving chief executive of Maori Television until he resigned in 2013 to take up the wananga job, said he received a text on November 19 confirming a payment had been made to an offshore account "as requested".

He launched an investigation and the payment was frozen in a bank account in Hong Kong. "The process to repatriate the funds is underway."

Mather said police here and in Hong Kong had immediately been alerted and Audit NZ was also notified.

He would not comment on the circumstances around Koroheke's departure as it was an "employment matter".

He sent an internal letter this month saying she had tendered her notice "and will be leaving us for family commitments".

Koroheke is an experienced accountant who was formerly head of the financial accounting team at Hamilton City Council and was appointed to the wananga's senior leadership team last year.  Both parties have signed a confidentiality agreement and Koroheke said it prevented her from commenting.

A close friend said Koroheke's resignation was unfair considering TVNZ had fallen for a similar scam recently.

"You can't stop something like this. She put her hand up for a degree of culpability but it should be shared culpability. The organisation is really not prepared for those kinds of cyber attacks."

But Mather said the wananga's  security settings and other controls were appropriately set.

"We have re-emphasised to staff the necessity for strict adherence to our accounts payable policies and procedures. It highlights the need for protocols and checks and balances to be followed."

Toni Demetriou, manager of the electronic messaging and compliance unit at Internal Affairs, said the department sent out a warning in September about "whaling" scams and the importance of organisations putting safeguards in place.

A single person should not have sole responsibility for money transfers and the scam highlighted the need for appropriate checks and balances.

Demetriou said there had been three or four cases where money had been sent and in some cases companies had been able to recover funds through the banks involved.

Thom Hooker, chief technology officer with email security company SMX, said the scammers were going to greater lengths than ever before.

"They are going to the trouble of researching a company, identifying individuals and then creating a domain to prop up a forging attempt to try and elicit the funds, they're actually spending money to do this."

Hooker said if the scammers didn't have a chief executive's email signature they would make it look like it was sent from a mobile device.

"They tend tend to play on people's desire to be helpful. They'll say something like 'I'm off site today can you help me out, a wire transfer needs to be paid urgently'."

Staff needed to have up to date security awareness training.

"You can put all the algorithms and computer hardware in place but if the people aren't going to stop and think 'am I following the process?' then all the security in the world isn't going to help. The human factor is the weak link in the chain."

* Email correspondence begins with a simple email query from the "CEO" to the CFO asking if they're available, before progressing to request an urgent funds transfer.
* The emails may say they have been sent from an iPhone, iPad or similar. This may be an attempt to distract the recipient from the fact that the CEO's normal email signature is not featured in the message.
* The spoofed email address domain of the "CEO" may be slightly different than it should be; for example it may end in ".biz" rather than "".

 - Sunday Star Times

Ad Feedback
special offers

'That was her dream, to provide a haven'

Salon co-owner Greg Carter with the salon's manager and hairdresser Salina-Pearl Nigro.

A Greenhithe resident's legacy lives on in her salon with a difference.

Viola player finalist a first

University of Auckland honours students and viola player, Julie Park said she's not afraid to try new things.

Julie Park explains her journey as the first viola player to make finalist at a well-known concerto competition.

Mad Butcher: Let's celebrate

Shaun Johnson makes a break during the match against Sydney Roosters.

Some fantastic news to celebrate.

Fire alarm warns homeowners

Breathing apparatus wearing firefighters accounted for all occupants as unharmed in the smoke-filled home.

Mairangi Bay homeowners on Auckland's North Shore came home to a blaring alarm and smoke-filled house.


From 'Fats' to fighting fit video

Fats Moke is a big man with a gang history who has worked with Dr Tom Mulholland to get his diabetes under control.

After a shock diagnosis, former mobster 'Fats' Moke is fighting back against losing his legs.

'PC gone haywire' video

The Poplar Ave interchange withthe expressway, dark, running along the centre, between the Poplar Ave roundabout and the ...

Backlash as proposed Maori street names for sections of old Kapiti SH1 are deemed "unpronounceable".

Wild weather hits


Strong winds hammer lower North Island causing power cuts, flooding and damage.

'Transience' hurting Porirua's kids

A quarter of Porirua's children live in overcrowded homes, and they are twice as likely to switch schools two or more ...

School switching leaving some Porirua kids at "the end of the tail of underachievement."


Dairy owner takes on robbers video

Sujan Burra fought back as two men robbed a Woolson dairy of snacks on Saturday night.

Sujan Burra has been robbed since day one. This time, he was ready with a bat.

Body pulled from river

The Buller Gorge (file shot).

Police have recovered a vehicle along with a man's body from the Buller River on the West Coast.

First snow dump for skifields

The first heavy snowfall has arrived at several southern ski fields, including Cardrona.

South Island slopes enjoy first heavy snowfall of the season thanks to Sunday's storm.

Afternoon party shut down video

At least five police cars and a dozen officers are at the scene.

Police shut down Dunedin student party after calls about noise and "people vomiting".


Architectural wonders revealed

The new law and management building at Waikato University was designed by Opus Architecture.

A lot of well known Waikato and Bay of Plenty buildings - and spaces - have earned accolades.

It's our turn to fix this

A medical school backed by Waikato Hospital, pictured, and Waikato University  seeks to train GPs to fill a critical ...

OPINION: The old boys have failed to fix New Zealand's doctor shortage, now it's our turn.

Join the fight for our med school

Waikato University vice-chancellor Professor Neil Quigley and Waikato District Health Board chief executive Dr Nigel Murray.

A proposed medical school in the Waikato has the Government interested.

Ref raids accounts

050711 NEWS. Robert Charles/Taranaki Daily News. Cheque/ cheque book. Money. Bank.

Colleagues blew the whistle on referee who swiped $13K and a video camera.


Women walk the world at Pukekura Park

Nearly 100 women took part in the  Women Walk the World 2017 which preceded the Associated Country Women of the World's ...

The walk precedes the Associated Country Women of the World's South Pacific Conference.

Bringing Beau home

Beau St George, his fiancee Herminie Gouard and their daughter, Joan. Beau tragically lost his life following a car ...

Nearly $30,000 has been raised to help bring Kiwi dad's body home after tragic crash in France.

Man stabbed in Normanby

Two police units were at the scene.

The alleged offender was being held down by the victim.

Costly second half errors for Team Taranaki

Team Taranaki's Domenico Squatriti was red carded against Western Suburbs in their Central League match.

Second loss hurts Team Taranaki.


A look inside the stricken gorge video

Two slips are about 2 kilometres apart and it will take weeks for the road through the Manawatu Gorge to reopen.

The road through the Manawatu Gorge will be closed for weeks - and here's why.

Cyber act in action

The Harmful Digitial Communications Act was passed in July 2015.

Act helps as more than 20 people prosecuted for posting harmful content online.

Ram-raid attempt to steal cigarettes

The Feilding BP on Kimbolton Rd was ram-raided.

A stolen ute was used to ram into a BP station in an attempt to steal cigarettes.

NZDF civilians take strike action

Civilian employees of NZDF are on strike about pay.

Union accuses the Defence Force of intimidation after strike action.


Not a house, it's a croquet shelter

Athol Turner has a few home comforts at the Hinemoa Croquet Club shelter, including coffee and a biography of Alec Guiness.

As the Nelson City Council looks to implement a new law banning sleeping in the city we meet a man who has made a croquet club his home.

Housing crisis help?

David Barnes, right, with his son Samuel Barnes who needs medical care, pictured with the dwelling David built for him ...

A Nelson man built a home on his property for his mentally-ill son. Could this solve our housing issues?

Guilty of murder

Philip Quayle died after being attacked on a street in Cairns, Australia, about 100 metres from home.

A man who choked a Nelson man to death during a random street attack in Cairns has been found guilty of murder.

Taking a leaf out of the future video

Nelson Mail Journalist Tim O'Connell with the Nissan Leaf electric vehicle(EV) that the Nelson Mail has had on loan from ...

Tim O'Connell shares the thrills, trials and tribulations of driving an electric vehicle.


City Hotel site snapped up

Rob Anderson has sold the City Hotel site on High St in Blenheim, three years after its demolition and subsequent ...

Empty lot used as public space in central Blenheim purchased by Marlborough investor.

Landing ... on SH1

Air Kaikoura Aero Club, pictured with its training plane near Mt Fyffe, supplied a service between Kaikoura and Clarence.

Cars can't use this part of State Highway 1, but Kaikoura aero club wants to use it for planes.

Tourism spend strong, considering

Destination Marlborough general manager Tracy Johnston says the latest figures from the Ministry of Business, Innovation ...

International, domestic tourism spend holds up in post-quake market.

Stormy conflict finally settled

Kingwell Drive resident Pauline Davis feeds fish and eels in Murphy's Creek.

Multimillion-dollar stormwater project gets green light after four-year battle.

South Canterbury

'Great' fun for all at colour run video

Ziah Tatuava, 6, of Waimate is having a roaring good time at the second-annual Colour Me Fun Run in Timaru on Sunday.

Colourful 'old ladies' and a family of 'dalmatians' took part in Timaru's annual Colour Me Fun Run on Sunday.

Scooter bros 'buzzing'

Kahurangi, left, giving his brother Makaia a pep talk before he competed on Saturday.

Timaru's scooting brothers have 'incredible' at the Australian Scooter Championships in Melbourne.

Museum social push

The South Canterbury Museum is looking to expand its social media reach beyond Facebook, using Instagram and YouTube, ...

The South Canterbury Museum could soon be using Instagram and YouTube to expand its social media reach.

Quad bike crash a 'terrible tragedy'

The crash happened at the intersection of Hakataramea Highway and Shearers Hill Road, southeast of Waimate.

 Police are looking into a quad bike crash which claimed the life of a man in South Canterbury.


Volunteer firefighters getting medical training

Edendale Firefighters Brendon Cameron, Shane Elliott, Richard Hart, Scottie Cameron, Brian Coyle, Rudi Verplancke and ...

Some Southland volunteer fire brigades are taking on extra medical training to provide a service to fill a need within their community.

Visitor tax unlikely

Finance Minister Steven Joyce and Clutha Southland MP Todd Barclay in Queenstown.

Finance Minister says more money does need to be spent on tourism infrastructure.

Pros and cons of reform

Southland Regional Development Strategy governance group chair Tom Campbell.

Experts say the effect of the changes to immigration reform are uncertain at this stage, with both positives and negatives to come out of the new policy.

Walking for enjoyment

Recreational walking gives June Wilson, left, and Ngaire Evans immense pleasure.

Joining walking groups is good for exercise and making friends, June Wilson says.

Ad Feedback