A Special Case of Business Email Compromise

Cloudflare warns that business email compromise (BEC) phishing has assumed a new form: vendor email compromise (VEC). The classic BEC case involves the impersonation of someone within an organization, taking advantage of the trust that builds up among co-workers to induce the victims to take some action–usually transfering funds, compromising credentials, or installing malware–that’s harmful to the organization.