Business Email Compromise Topples Over $26 Billion in Losses

iStock-1046153146This lucrative business of tricking companies into fraudulently transferring funds into cybercriminal-owned bank accounts is showing signs of growing. Scammers use many forms of attack to attempt to separate your organization from its’ money. BEC—aka CEO Fraud— is one of the easiest; using little more than really good social engineering in some cases, the bad guys have found that users can be easily fooled into sending the company’s money to a bad guy-controlled account.

Just last month, a group responsible for stealing nearly $12 million from 12 companies via BEC scams was arrested in Spain. With only about $1.4 million recovered, these scams are proving to be both lucrative to the attacker, and painful to the victim.

The high success rate of BEC attacks is due to the attacker’s ability to pretend to be someone trusted within the company (usually the CEO or the like), and leverage that established “credibility” to get employees to do their bidding – usually to the tune of making a “payment” of some kind to a partner, vendor, etc.

The mammoth estimated losses of $26 billion from June 2016 through July 2019 demonstrate that organizations need to a) recognize this as a real risk and b) understand they need to prepare their employees against such attacks.

The most effective way to protect against BEC attacks is the recipient user. By educating them on how these scams work and how to spot one quickly through Security Awareness Training, organizations can elevate the organization’s preparedness against such attack well-before an attack attempt ever takes place.

Will your users respond to phishing emails?

KnowBe4's Phishing Reply Test (PRT) is a complimentary IT security tool that makes it easy for you to check to see if key users in your organization will reply to a highly targeted phishing attack without clicking on a link. PRT will give you quick insights into how many users will take the bait so you can take action to train your users and better protect your organization from these fraudulent attacks!

PRT-imageHere's how it works:

  • Immediately start your test with your choice of three phishing email reply scenarios
  • Spoof a Sender’s name and email address your users know and trust
  • Phishes for user replies and returns the results to you within minutes
  • Get a PDF emailed to you within 24 hours with the percentage of users that replied

Go Phishing Now!

PS: Don't like to click on redirected buttons? Cut & Paste this link in your browser:

Subscribe To Our Blog

Free Phishing Security Resource Kit

Get the latest about social engineering

Subscribe to CyberheistNews