Glossary: Security Testing and Awareness Training

Vendor email compromise

BEC in which the attacker has broken into a supplier's real mailbox and sends fake bank-change requests from it.