Attack types
비즈니스 이메일 침해BEC
Definition
Social-engineering fraud impersonating execs/vendors to trigger wires or data leaks — often with no link or attachment.
For executives (CEO·CISO)
The single largest financial-loss vector (tens of thousands to millions per incident). With no malware, AV/sandbox are useless and human process is the last line. Commonly missed: tech alone cannot stop it — hard-code dual-channel approval for payments/bank-detail changes above a threshold, and train staff that "urgent & confidential" is itself a red flag.