Business Email Compromise: The Silent Cyber Threat

Business Email Compromise: The Silent Cyber Threat with Crane Hassold, Director of Threat Intelligence, Abnormal Security

Since 2015, business email compromise (BEC) has become the primary cyber threat impacting business all over the world. And yet, other forms of cyber attacks generally get more attention. Even most security awareness programs primarily focus on training employees to not click on phishing links or open malicious attachments, while most BEC attacks rely on basic social engineering and don't utilize links or payloads in their emails. This gap in awareness training is one of the many reasons cybercriminals have pivoted to BEC as a preferred attack vector.

In this presentation we'll discuss why BEC has become such a pervasive global threat. We'll also look at how the BEC threat landscape is evolving and what types of BEC attacks are becoming more common. Finally, the presentation will cover how security awareness training programs can better prepare employees to identify and defend against BEC attacks.

View upcoming Summits: http://www.sans.org/u/DuS Download the presentation slides (SANS account required) at https://www.sans.org/u/1iaE