Cyberstudy
PDF p.47 In progress

Business Email Compromise

Open PDF at p.47 21 flashcards

Summary

PDF p.47

Business email compromise (BEC) involves sophisticated campaigns targeting specific individuals within a company, often executives or senior managers. The goal is typically to trick the target into authorizing fraudulent payments or wire transfers.

In plain words

Supplementary — not from your PDF

Business email compromise is a carefully researched scam aimed at people who can move money. The attacker poses as a boss, colleague or supplier, sometimes from a real hijacked mailbox, and asks for a payment or a change of bank details.

Detailed explanation

PDF p.47
  • Business Email Compromise (BEC)
    • Definition: Sophisticated campaign targeting specific individuals within a company.
    • Targets: Executives or senior managers.
    • Method: Threat actor poses as a colleague, business partner, or vendor.
    • Reconnaissance: Detailed understanding of the target and psychological approach.
    • Execution: May involve gaining control of a legitimate mail account.
  • Financial Motivation
    • Objective: Persuade a budget holder to authorize fraudulent payments or wire transfers.
    • Terminology
      • Spear Phishing: Targeting specific individuals.
      • Whaling: Targeting influential employees.
      • CEO Fraud: Impersonating the CEO.
      • Angler Phishing: Using social media as the vector.
  • Brand Impersonation and Disinformation
    • Brand Impersonation
      • Definition: Duplicating a company's logos and formatting to create convincing phishing messages or websites.
      • Methods: Mimicking email style, tone, and realistic content to boost search rankings.
    • Disinformation/Misinformation
      • Disinformation: Purposeful deception.
      • Misinformation: Repeating false claims without intent to deceive.
      • Campaigns: Create fake social media posts or referrers to amplify false facts.
  • Watering Hole Attack
    • Definition: Compromising an unsecure third-party website used by a group of targets.
    • Example: Compromising a local pizza delivery firm's website to infect employees of an e-commerce company.

Important terms

taken from the text above
Business Email Compromise (BEC)
Sophisticated campaign targeting specific individuals within a company.
Targets
Executives or senior managers.
Reconnaissance
Detailed understanding of the target and psychological approach.
Execution
May involve gaining control of a legitimate mail account.
Spear Phishing
Targeting specific individuals.
Whaling
Targeting influential employees.
CEO Fraud
Impersonating the CEO.
Angler Phishing
Using social media as the vector.
Brand Impersonation
Duplicating a company's logos and formatting to create convincing phishing messages or websites.
Disinformation
Purposeful deception.
Misinformation
Repeating false claims without intent to deceive.
Campaigns
Create fake social media posts or referrers to amplify false facts.
Watering Hole Attack
Compromising an unsecure third-party website used by a group of targets.
BEC Business email compromise

Examples & real-world scenarios

Supplementary — not from your PDF
  • Whaling: targeting the CFO with a fake request 'from the CEO'.
  • Watering hole: compromising a website the target staff visit often.
  • Angler phishing: posing as customer support on social media.

Scenario

Finance receives an email from a real supplier's account asking to update bank details before Friday's payment. A call-back to a phone number already on file (not one in the email) shows the supplier's mailbox was hijacked.

Common mistakes

Supplementary — not from your PDF
  • Trusting a request because it comes from a genuine address. The account itself may be compromised.
  • Mixing up disinformation (deliberate) with misinformation (repeated without intent).

Practical skills

Supplementary — not from your PDF
  • Design a payment-change verification procedure that doesn't rely on email.

What I should remember

Key Points PDF p.47
  • Business Email Compromise (BEC)
    • Definition: Sophisticated, targeted campaigns.
    • Targets: Executives, senior managers.
    • Method: Posing as trusted contacts.
  • Financial Motivation
    • Objective: Fraudulent payments, wire transfers.
    • Terminology: Spear phishing, whaling, CEO fraud, angler phishing.
  • Brand Impersonation and Disinformation
    • Brand Impersonation: Duplicating logos, formatting.
    • Disinformation/Misinformation: Purposeful deception, repeating false claims.
  • Watering Hole Attack
    • Definition: Compromising third-party websites.
    • Example: Infecting employees via compromised local services.