Cyber Threat Landscape & Business Email Compromise Preventing

Business email compromise (BEC), a sophisticated form of phishing that involves attackers manipulating individuals into unwittingly facilitating fraudulent activities, is considered one of the most financially damaging cyber threats, according to Beinsure Report.

Compared to other cyber threats such as ransomware attacks, zero-day vulnerability exploits, and cloud service provider outages, business email compromise is akin to a “sleeper threat” in that it does not dominate news headlines. However, BEC is considered one of the most financially damaging cyber threats by the Federal Bureau of Investigation.

BEC is a form of phishing where attackers impersonate legitimate entities or individuals to deceive employees.

They aim to transfer funds, access sensitive information, or compromise organizational security. This method exploits human vulnerabilities, not technical flaws, making it hard for traditional security measures to detect and mitigate the risk.

According to Guy Carpenter’s Cyber’s Sleeper Threat Report, a common and damaging type of BEC is wire fraud. In this scenario, cybercriminals use social engineering to trick employees into initiating unauthorized wire transfers, causing significant financial losses for the organization.

As BEC attacks become more frequent and sophisticated, businesses need to understand this threat to implement strong defenses and protect their assets, reputation, and operations. This report provides an overview of the BEC threat and examines whether it affects specific sectors of the economy or has a broader impact.

BEC Threat Landscape

BEC attacks differ from traditional cyber threats by exploiting human trust rather than technical vulnerabilities. Cyberattacks involve cybercriminals impersonating trusted figures like company executives, vendors, or business partners to deceive employees. The goal is to trick them into revealing sensitive information, authorizing fraudulent transactions, or compromising corporate networks.

The FBI’s Internet Crime Complaint Center (IC3) reports that BEC attacks cause annual economic losses exceeding billions of dollars.

From October 2013 to December 2022, the following statistics were recorded:

• Total US victims: 137,601
• Total US exposed dollar loss: $17.3 bn

In 2023, IC3 received over 21,000 BEC-related complaints, marking a significant increase from previous years.

BEC wire fraud can lead to severe financial losses, reputational damage, and operational disruption for organizations. Businesses must understand this threat landscape to protect their financial assets and mitigate BEC risks.

Fraudulent Wire Transfer Requests

Once trust has been established and employees are primed for compliance, cybercriminals proceed to orchestrate fraudulent wire transfer requests designed to divert funds into accounts controlled by the attackers.

These requests often involve convincing pretexts, such as urgent payment for purported business expenses, invoice payments to fictitious suppliers, or instructions to update banking information due to purported security concerns.

By exploiting common business processes and workflows, attackers can seamlessly blend their fraudulent requests into legitimate communications, making detection and interception challenging for unsuspecting employees and financial institutions alike.

Evolving Tactics and Techniques

The landscape of BEC wire fraud constantly changes. Cybercriminals refine their tactics to evade detection and exploit new vulnerabilities.

They use various tools and methods to achieve their objectives:

• Email spoofing: Cybercriminals forge the sender’s email address to make it appear as if the message comes from a trusted source within the recipient’s organization. They use spoofing tools to manipulate email headers and disguise their identities. This tactic helps them bypass email authentication and traditional security filters, increasing the chances of their fraudulent messages reaching the target.
• Domain impersonation: Attackers create fraudulent email domains or compromise legitimate ones to lend credibility to BEC schemes. They register domain names that closely resemble those of legitimate organizations or use subdomains of compromised domains to mimic trusted entities. This exploitation of familiar domain names deceives employees into believing the fraudulent communications are legitimate.
• Malware-enabled attacks: These sophisticated attacks involve using malicious software to compromise email accounts, steal sensitive information, or facilitate fraudulent transactions. Attackers may distribute malware-laden email attachments or exploit software vulnerabilities to gain unauthorized access to corporate networks.

BEC attacks present a significant challenge for organizations as they balance open communication and protection against malicious actors.

The consequences of a successful BEC attack include financial losses, regulatory penalties, and irreparable damage to an organization’s reputation and customer trust.

FAQ