Attack types
공급망 이메일 침해VEC
Definition
A supply-chain BEC where a trusted vendor's account is hijacked to swap payment details on invoices.
For executives (CEO·CISO)
Even with perfect internal security, a breached vendor sends forged invoices from the real account, often slipping into an existing thread. Commonly missed: verify any bank-detail change by calling a pre-registered number (never by email reply), and keep an audit trail of vendor payment-detail changes.