Business Email Compromise

Business Email Compromise (BEC)

Learn more about BEC, also known as CEO fraud or whaling attacks.

What is Business Email Compromise?

A BEC attack, also known as CEO Fraud or Whaling Attack, begins with a cybercriminal hacking and spoofing emails to impersonate your company’s supervisors, CEO, or vendors. Once in, they request a seemingly legitimate business payment. The email looks authentic, seems to come from a known authority figure, so the employee complies. Typically, the fraudster will ask for money to be wired or checks to be deposited, whatever the usual business practice. However, this scam has evolved not even to involve money. Instead, the same technique is used to steal employee’s personally identifiable information, or wage and tax forms.

Types of BEC

Based on FBI, there are types of BEC scams:

The Bogus Invoice Scheme – Companies with foreign suppliers are often targeted with this tactic, wherein attackers pretend to be the suppliers requesting fund transfers for payments to an account owned by fraudsters.
CEO Fraud – Attackers pose as the company CEO or any executive and send an email to employees in finance, requesting them to transfer money to the account they control.
Account Compromise – An executive or employee’s email account is hacked and used to request invoice payments to vendors listed in their email contacts. Payments are then sent to fraudulent bank accounts.
Attorney Impersonation – Attackers pretend to be a lawyer or someone from the law firm supposedly in charge of crucial and confidential matters. Normally, such bogus requests are done through email or phone, and during the end of the business day.
Data Theft – Employees under HR and bookkeeping are targeted to obtain personally identifiable information (PII) or tax statements of employees and executives. Such data can be used for future attacks.

How can we help?

Anti-Spoofing Protection
Libraesva ESG adopts standard authentication protocols such as SPF, DKIM, and DMARC, that can actively stop domain spoofing. With an additional proprietary feature, we can prevent spoofing for any configured domain when the sender is originating from outside.
Whaling Protection Engine
Libraesva designed a specific engine in order to intercept these attacks. The required configuration is minimal: the names and the legit email addresses of the company executives. And we got you covered.
Adaptive Trust Engine
The innovative ATE technology of Libraesva can place an inline warning at the top of the message body when a message is from an external source and the sender is the first time he is writing to you.
Phishing and Malware Protection
Libraesva proprietary Sandbox engines protect you from links and dangerous documents, keeping you safe from phishing and malware.

What to do next?

Tell me more

Ream more about how Libraesva technology can protect your company from CEO fraud

Email Security Test

Test if your email server is correctly configured to stop BEC and other common threats.

Contact Me

Have Libraesva experts call me either by phone or mail.

FREE Download: The expert's guide to choosing an email security solution

GET YOUR COPY

Privacy Overview

This website uses cookies to improve your experience while you navigate through the website. Out of these, the cookies that are categorized as necessary are stored on your browser as they are essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyze and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies. But opting out of some of these cookies may affect your browsing experience.

Necessary

Always Enabled

Necessary cookies are absolutely essential for the website to function properly. These cookies ensure basic functionalities and security features of the website, anonymously.

Cookie	Duration	Description
cookielawinfo-checkbox-analytics	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics".
cookielawinfo-checkbox-functional	11 months	The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional".
cookielawinfo-checkbox-necessary	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary".
cookielawinfo-checkbox-others	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other.
cookielawinfo-checkbox-performance	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance".
viewed_cookie_policy	11 months	The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.

Functional

Performance

Analytics

Others

What is Business Email Compromise?

Types of BEC

How can we help?

Anti-Spoofing Protection

Whaling Protection Engine

Adaptive Trust Engine

Phishing and Malware Protection

What to do next?

Tell me more

Email Security Test

Contact Me

Products

Industry

Solutions

Resources

Partners

Company