Business Email Compromise (BEC)
Sophisticated scam targeting businesses through compromised or spoofed email accounts to authorize fraudulent wire transfers or data theft.
Overview
BEC attacks represent one of the costliest cyber threats to businesses, with losses exceeding billions of dollars annually. Attackers either compromise legitimate email accounts or create convincing spoofs to impersonate executives, vendors, or business partners. These attacks exploit trust relationships and business processes, often targeting finance departments during busy periods. The FBI considers BEC one of the most financially damaging cybercrimes. Unlike malware-based attacks, BEC relies purely on social engineering, making it harder to detect with traditional security tools.
Real-World Examples
- ▸CEO email requesting urgent wire transfer to new vendor
- ▸Compromised vendor account changing payment details
- ▸Fake attorney requesting confidential employee data
Related Terms
Protect Against Business Email Compromise (BEC)
PhiShark's agentic AI detects and analyzes threats in real-time
Start Free Trial