
Business email compromise (BEC)
A type of social engineering attack in which one party of a financial transaction gets impersonated. For example, in the buying or selling of a house, an attacker may impersonate the real estate agent or solicitor by using a compromised or spoofed email account, and then socially engineer the buyer to redirect funds to their own bank account during the final stages of the transaction. See also CEO fraud.