https://www.upguard.com/glossary/business-email-compromise occurs when cybercriminals scam organizations by compromising sensitive data through email accounts for financial gain. Cybercriminals can use several techniques to carry out BEC scams, including directly hacking an email account and social engineering techniques.

The cybercriminal can now gain access to the employee's email account and carries out a https://www.upguard.com/blog/cyber-attack directly via the compromised account.

The cybercriminal uses the spoofed email address or hacked account to send an email to another employee from the same organization requesting confidential information.

Account Compromise: A cybercriminal hacks an employee's email account and sends fraudulent invoices to vendors from its address book, requesting payments to an unfamiliar bank account.

Related Articles