What should the IT Security department of a Broker/Dealer do to specifically address and mitigate these threats?
What technical solutions should be put in place? (or be enhanced accordingly)
Does anyone have additional information on these attacks? (e.g. breadth, scope, etc?)
If you look at the guidance provided, they give a couple of specifics that are relevant for IT Security:
Ensure your controls are enforced so that individuals cannot sidestep your current out-of-band authentication and verification
If you run statistical analysis tools to alert on anomalies, they may well already be picking up this sort of wire transfer fraud.
This is probably the key IT control here - even a basic DLP solution should allow you to search for these words at your mail gateway, which can pick this up rapidly.
It is a fairly standard social engineering attack, relying on the financial institution wanting to be as helpful as possible to the customer in dire straits. As staff are only human, enforcing IT controls is the simplest way to avoid a 'helpful' member of staff bypassing procedures and then becoming a victim.