Summary
Business Email Compromise (BEC) is a social engineering scam. An employee, usually one with financial authority, can receive a well-worded email that appears to come from the Chief Executive Officer (CEO) or president requesting a wire transfer. Emails structured as such are likely to receive less scrutiny due to how legitimate it looks. The employee, convinced of the seemingly legitimate request, unwittingly transfers a hefty amount of money to an account the fraudster controls. And that’s just one scenario based on the five known BEC tactics. To know more about the types of BEC scams, refer to this article Security 101: Business Email Compromise (BEC) Schemes.
Learn how to be protected against BEC attack using IMSVA.
Requirements:
- IMSVA version 9.0 (with the latest patch) or version 9.1
- Anti-Spam Engine version 8.100.1054 or later
Refer to the following steps to enable BEC protection:
- Log on to the IMSVA web console.
- Navigate to Policy > Policy List and click Default spam rule.
- Tick Enable, go to "And scanning conditions match" section, and click Edit.
- Tick Social Engineering Attack Protection under Spam / Phishing / Social Engineering Attack section.
- Save and exit.
