Business Email Compromise (BEC) Attacks: How to Stop Them

Huntress explains business email compromise, citing $55 billion in global losses and attacks at 36% of surveyed firms.

Huntress describes business email compromise as impersonation by email to redirect payments or steal credentials, citing about $55 billion in worldwide losses. Its survey of more than 500 US IT professionals found 36% of organizations had a BEC incident in the past 12 months, behind only malware and phishing, with financial gain the leading suspected motive. The described path runs from reconnaissance and adversary-in-the-middle collection to mailbox takeover, executive or vendor impersonation, and fraudulent requests. The post says generative AI makes lure text more convincing and lists urgency, gift-card requests, typos, and lookalike addresses as warning signs.