← Security+ glossary

Business email compromise (BEC) BEC

A targeted fraud in which the attacker impersonates a director, vendor or partner via email in order to extract a payment or sensitive data. It relies on social engineering - authority, urgency and secrecy - rather than malware, so technical tools have a hard time catching it.

All Security+ guides →