Freely subscribe to our NEWSLETTER

There is a clear pattern to watch out for, which often begins with phishing an executive, dropping a Trojan, and gaining 24/7 access to that individual’s inbox. Then they research the organization and monitor the email account for months until the right circumstances arrive, next they pounce. They spoof the CEO’s address and send messages to employees in accounting from a look-alike domain name that is one or two letters off from the target company’s true domain name.

FBI numbers indicate the average loss for a BEC victim at a whopping $100,000.
KnowBe4 has noticed this scam filtering down to the consumer level. People that are in the process of buying a house and need to transfer a sizable down payment are receiving an email from their lawyer or realtor to transfer that down payment to a certain bank account. When they call the next day to check if the money has arrived, the lawyer tells them they did not send any transfer requests, the money has disappeared in the meantime however. The same scam is done with spoofed emails from financial brokers. I can forward you two real email attempts to attack our small firm.