Attacks and malware
What is Business email compromise?
Fraud where criminals impersonate or take over a business email account to trick staff into paying invoices or changing bank details.
Business email compromise, or BEC, is fraud carried out through business email. Criminals either take over a real mailbox or impersonate one, then ask staff to pay a fake invoice, change a supplier's bank details or buy gift cards.
BEC often involves no malware. It relies on timing, authority and the normal pace of business. The FBI's IC3 consistently reports it among the most costly forms of cybercrime by losses.