Glossary: Security Testing and Awareness Training
Business email compromise (BEC)
Also written: BEC
Fraud that uses a taken-over business email account, or a look-alike one, to trick staff into sending money or data. It often has no link or malware, like the fake Andes Beans invoice with new bank details sent to Jo.
Where the book teaches it
Related terms
CEO fraudVendor email compromisePayroll diversionLook-alike domainOut-of-band verificationReply-To header