What is Business email compromise?
In short
Business email compromise is a scam in which attackers use a hacked or spoofed email account of an executive or supplier to trick employees into wiring money or changing payment details.
Key takeaways
- Requests are often urgent and ask for secrecy.
- Calling back on a known phone number to confirm payment changes is a key control.
- Dual approval for wires and new bank details reduces losses.
Where it's tested
ISC: Information Security Fundamentals — study notes, a five-minute revision sheet and practice questions.
Practise: 3 questions
Question 1 of 3 · 0 answered
To send a confidential message that only the intended recipient can read, which key should the sender use to encrypt it?