Tag

Business Email Compromise

Analyzes business email compromise (BEC) scams where attackers impersonate executives or vendors to trick employees into transferring funds or sharing sensitive data. Covers detection methods, employee training approaches, and technical controls to prevent BEC attacks.

posts

Executive Phishing Attacks

Executive Phishing Attacks: Why the C-Suite Is Target #1

The CEO Who Wired $47 Million to a Threat Actor In 2016, Austrian aerospace manufacturer FACC lost €42 million (roughly $47 million) after attackers impersonated the company's CEO via email and convinced an employee in the finance department to transfer funds for a fake acquisition project. The CEO

Carl B. Johnson Aug 14, 2019 7 min read
Fake Mail

Fake Mail: How to Spot It Before It Costs You

In 2023, the FBI's Internet Crime Complaint Center reported that business email compromise — a sophisticated form of fake mail — caused adjusted losses exceeding $2.9 billion. That single category of email fraud outpaced every other cybercrime type in financial damage. And those are just the cases that got

Carl B. Johnson Jun 12, 2019 7 min read
Fake Emails

Fake Emails: How to Spot Them Before They Cost You

A Single Fake Email Cost This Company $37 Million In 2024, Japanese pharmaceutical giant Nikkei disclosed that a single employee wired approximately $29 million to a fraudulent account after receiving what appeared to be a legitimate email from a senior executive. They aren't alone. The FBI's

Carl B. Johnson Apr 05, 2019 7 min read
FakeEmail

FakeEmail Attacks: How Spoofed Messages Breach Networks

A Single FakeEmail Cost One Company $37 Million In 2024, Orion SA, a Luxembourg-based steel trading company, disclosed it lost approximately $60 million after an employee was tricked by a business email compromise scheme using fraudulent email communications. That same year, the FBI's IC3 received over 21,000

Carl B. Johnson Apr 05, 2019 7 min read
Fake Mailer

Fake Mailer Attacks: How Threat Actors Spoof Email

In March 2024, the FBI's Internet Crime Complaint Center reported that business email compromise — much of it powered by spoofed sender addresses — cost victims over $2.9 billion in a single year. Behind many of those attacks sits a deceptively simple weapon: a fake mailer. These tools let

Carl B. Johnson Mar 10, 2019 7 min read