Business email compromise (BEC) attacks result in financial fraud, identity theft or data breaches by deceiving victims into sending money, modifying direct deposit information or sending personally identifiable information (PII).
Using social engineering and spear phishing techniques, cybercriminals target senior officials to gain full access to their email account in order to get finance or human resources departments to provide payroll information or transfer funds. According to NTTSecurity, the average cost of a ransomware attack to an organization is $700, but the average cost of a BEC attack is $67,000.
Find out more about how you can identify a BEC attack and report it to the Office of Information Security by visiting- https://uthealthsa.sharepoint.com/IMS/Pages/InfoSec/bec-attacks.aspx