Business Email Compromise

---

Business email compromise is an impersonation attack in which the attacker gains control of an employee’s account and uses it to convince other employees to perform fraudulent actions.

• threat actor likely to perform reconnaissance of target to develop pretext approach
• specific, targeted attack