{"id":1313,"date":"2022-06-17T15:18:52","date_gmt":"2022-06-17T08:18:52","guid":{"rendered":"https:\/\/dt-corp.com.vn\/?p=1313"},"modified":"2022-06-17T15:18:52","modified_gmt":"2022-06-17T08:18:52","slug":"bec-attacks-can-you-stop-the-imposters-in-your-inbox","status":"publish","type":"post","link":"https:\/\/dt-corp.com.vn\/?p=1313","title":{"rendered":"BEC Attacks: Can You Stop the Imposters in Your Inbox?"},"content":{"rendered":"<h2><em>BEC attacks are a $1.8 billion dollar racket \u2014 and statistically, your business will be targeted sooner rather than later. Watch this webinar to learn how to stop them.<\/em><\/h2>\n<p>If asked which of the threat types\u00a0<a href=\"https:\/\/www.ic3.gov\/Media\/PDF\/AnnualReport\/2021_IC3Report.pdf\" target=\"_blank\" rel=\"noopener\">tracked by the FBI<\/a>\u00a0causes the most financial damage, most people would say ransomware.<\/p>\n<p>They\u2019d be wrong.<\/p>\n<p>In 2021, the FBI\u2019s Internet Crime Complaint Center (IC3) received 19,954 Business Email Compromise (BEC) reports, with adjusted losses totaling almost $2.4 billion. That\u2019s an average of more than $120,270 per incident, compared with just under $13,200 per incident for ransomware attacks.<\/p>\n<p>Since the FBI began tracking these threats in 2013, tens of billions in financial losses have been recorded, resulting from nearly 170,000 incidents in 178 countries.<\/p>\n<h2>So why hasn\u2019t this threat risen to the notoriety of ransomware?<\/h2>\n<p>During many\u00a0<a href=\"https:\/\/www.sonicwall.com\/solutions\/advanced-threats\/ransomware-protection\/\">ransomware attacks<\/a>, business operations grind to a halt. When a company loses access to customer information, payment systems and mission-critical applications, it often becomes clear in short order that something is wrong.<\/p>\n<p>But BEC attacks are comparatively silent. Even when these attacks have a huge impact on an organization\u2019s bottom line, operations can generally continue as usual. As a result, businesses frequently opt to keep these attacks out of the public eye to avoid risking reputation damage and loss of trust.<\/p>\n<p>But although ransomware still dominates security news, the growing frequency, volume and cost of BEC attacks have begun attracting more attention.<\/p>\n<p>As a result, BEC attacks have become a top threat concern for many organizations today, according to a recent SonicWall-sponsored white paper by Osterman Research. \u201c<a href=\"https:\/\/www.sonicwall.com\/resources\/white-papers\/how-to-deal-with-business-email-compromise\/\" target=\"_blank\" rel=\"noopener\">How to Deal with Business Email Compromise<\/a>\u201d reports primary research data from an in-depth customer survey of 119 respondents, each of which has direct knowledge of how their organization is addressing or planning to address the risk of BEC.<\/p>\n<p>The results from this study offer a look at how security influencers and decision-makers are taking BEC into account when formulating their spending plans for the next 12 months. For example, while just 46% of organizations said they considered protecting against BEC attacks \u201cimportant\u201d or \u201cextremely important\u201d 12 months ago, 76% said they considered it important or extremely important today.<\/p>\n<div class=\"avia-image-container  av-styling-     avia-align-center \">\n<div class=\"avia-image-container-inner\"><a class=\"avia_image lightbox-added\" href=\"https:\/\/d3ik27cqx8s5ub.cloudfront.net\/blog\/media\/uploads\/BEC-Osterman-Importance-Graph-1030x681.jpg\"><img decoding=\"async\" class=\"avia_image \" title=\"BEC-Osterman Importance Graph\" src=\"https:\/\/d3ik27cqx8s5ub.cloudfront.net\/blog\/media\/uploads\/BEC-Osterman-Importance-Graph.jpg\" alt=\"Image describing BEC Importance\" \/><\/a><\/div>\n<\/div>\n<blockquote>\n<h2>80%<\/h2>\n<p>Organizations indicating that protecting against BEC attacks in 2023 is of high importance<\/p><\/blockquote>\n<p>The data also shows that three-fifths of organizations in the study view protecting against BEC attacks as one of their top five security priorities.<\/p>\n<div class=\"avia-image-container  av-styling-     avia-align-center \">\n<div class=\"avia-image-container-inner\"><a class=\"avia_image lightbox-added\" href=\"https:\/\/d3ik27cqx8s5ub.cloudfront.net\/blog\/media\/uploads\/BEC-Osterman-Priorities-Graph-1030x530.jpg\"><img decoding=\"async\" class=\"avia_image \" title=\"BEC-Osterman Priorities Graph\" src=\"https:\/\/d3ik27cqx8s5ub.cloudfront.net\/blog\/media\/uploads\/BEC-Osterman-Priorities-Graph.jpg\" alt=\"\" \/><\/a><\/div>\n<\/div>\n<blockquote>\n<h2>62%<\/h2>\n<p>Organizations ranking protecting against BEC attacks as one of their top five priorities.<\/p><\/blockquote>\n<h2>How BEC Attacks Fly Under the Radar<\/h2>\n<p>But what makes BEC attacks so dangerous when compared with other forms of cyberattacks? And why are they harder to stop?<\/p>\n<p>BEC is a specialized type of phishing attack that\u00a0relies on social engineering. They often use a proven pretexting technique to engineer a quick introduction and establish a believable scenario in order to manipulate the victim to take a specific action.<\/p>\n<p>While these attacks can target employees at any level of an organization, they generally start with an attacker impersonating a person with authority, such as a CEO or CFO, a manager, or a supplier. The attacker uses the authority figure\u2019s identity to start a chain of plausible (but fake) requests to gain monetary payment. This typically involves instructing someone in accounts payable, someone in HR or even someone with a company credit card to pay a fake invoice, transfer funds, send gift cards or make payroll payouts. The urgent tone of these messages encourages the victim to respond or act quickly, bypassing any checks and balances that may be in place.<\/p>\n<p>Compared with other forms of cyberattacks, BEC attacks are among the hardest to detect because the threat signals are far less obvious. Relying on trickery and impersonation, the approach is very subtle, and the actual delivery generally doesn\u2019t use weaponized URLs or malicious attachments, which are easily detected.<\/p>\n<p>In addition, the email content and the delivery mechanism are usually of higher quality and often tailored to target a specific person or persons. With little to no apparent sign of a threat, these messages can bypass most email security filters to reach the inbox \u2014 and the absence of any sort of alert, such as a contextual warning advising them to exercise caution, leaves the victim more vulnerable to falling for the scam.<\/p>\n<p>Because so many of these scams are successful, their use has grown dramatically \u2014 today, roughly 80% of companies targeted by BEC attacks each year. While there isn\u2019t much you can do to avoid being\u00a0<em>targeted,\u00a0<\/em>there\u2019s plenty you can do to safeguard your organization\u2019s finances. To learn more about BEC attacks and how to stop them, check out our webinar, \u201c<a href=\"https:\/\/www.brighttalk.com\/webcast\/5052\/529956?utm_source=Eloqua&amp;utm_campaign=7015d000002GFcNAAW&amp;utm_medium=email&amp;sfc=7015d000002GFcNAAW&amp;ec=15142\" target=\"_blank\" rel=\"noopener\">Can You Stop the Imposters in Your Inbox?<\/a>\u201d<\/p>\n<p>Source:<a href=\"https:\/\/by.com.vn\/bExDS7\"> KEN DANG<\/a><\/p>\n<div class=\"special-heading-border\"><\/div>\n","protected":false},"excerpt":{"rendered":"<p class=\"tx-excerpt\">BEC attacks are a $1.8 billion dollar racket \u2014 and statistically, your business will be targeted sooner rather than later. Watch this webinar to learn how to stop them. If asked which of","protected":false},"author":3,"featured_media":1314,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[13],"tags":[],"class_list":["post-1313","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog"],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"https:\/\/dt-corp.com.vn\/wp-content\/uploads\/2022\/06\/BEC-Blog-1200x500-1-1030x429-1.jpg","_links":{"self":[{"href":"https:\/\/dt-corp.com.vn\/index.php?rest_route=\/wp\/v2\/posts\/1313","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dt-corp.com.vn\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dt-corp.com.vn\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dt-corp.com.vn\/index.php?rest_route=\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/dt-corp.com.vn\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1313"}],"version-history":[{"count":1,"href":"https:\/\/dt-corp.com.vn\/index.php?rest_route=\/wp\/v2\/posts\/1313\/revisions"}],"predecessor-version":[{"id":1315,"href":"https:\/\/dt-corp.com.vn\/index.php?rest_route=\/wp\/v2\/posts\/1313\/revisions\/1315"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dt-corp.com.vn\/index.php?rest_route=\/wp\/v2\/media\/1314"}],"wp:attachment":[{"href":"https:\/\/dt-corp.com.vn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1313"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dt-corp.com.vn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1313"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dt-corp.com.vn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1313"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}