{"id":33758,"date":"2021-01-07T09:30:52","date_gmt":"2021-01-07T01:30:52","guid":{"rendered":"https:\/\/dp2024.sim-dp.com\/?p=33758"},"modified":"2021-10-22T15:18:35","modified_gmt":"2021-10-22T07:18:35","slug":"how-to-protect-yourself-from-business-email-compromise-bec","status":"publish","type":"post","link":"https:\/\/dp2024.sim-dp.com\/en\/how-to-protect-yourself-from-business-email-compromise-bec\/","title":{"rendered":"How to Protect Yourself from Business Email Compromise (BEC)"},"content":{"rendered":"

Since the outbreak of COVID-19 pandemic in early 2020, many companies have launched home office to protect employees from infection while keeping their operations uninterrupted. The traditional office work model has been completely overturned due to the epidemic. While companies are busy adjusting work procedures to adapt to the new normal, cybercriminals are taking chances to obtain benefits using Business Email Compromise (BEC) and email account compromise (EAC).<\/span><\/p>\n

 <\/p>\n

Business Email Compromise (BEC) is an exploit in which a cybercriminal pretends to be an executive or employee, trying to get a colleague, customer or vendor to transfer funds or sensitive information to the phisher. Often, an attacker will create an account with an email address almost identical to one on the corporate network, relying on the assumed trust between the victim and their email account.<\/span><\/p>\n

 <\/p>\n

As for email account compromise (EAC), attackers find different ways, such as password spray, phishing, malware, to compromise your email account, gaining access to legitimate mailboxes. Once attackers gain legitimate access to the target\u2019s email account, they have access to emails and contacts to profile their target. They will maintain continued access to the compromised account by creating email forwarding rules or changing account permissions, so that they can closely monitor the target and conduct email fraud.<\/span><\/p>\n

 <\/p>\n

According to the \u201c2019 Cybercrime Report” released by the Cybercrime Complaint Center (IC3) of the US Federal Bureau of Investigation (FBI) at the beginning of 2020, a total of 23,775 complaints about business email fraud or email accounts were received during the period of 2019. The intrusion caused a total of more than 1.7 billion U.S. dollars in losses, accounting for about half of the total cybercrime losses in 2019.<\/span><\/p>\n

 <\/p>\n

How to Protect Yourself and Your Company<\/b><\/p>\n