Attack

Business email compromise

BEC

Fraud that uses a hijacked or spoofed work email account to redirect payments.

Attackers pose as an executive, supplier or lawyer and ask for an urgent transfer or a change of bank details. No malware is needed, and it causes some of the largest financial losses of any cybercrime.