The democratisation of business email compromise fraud
Summary: A Cisco Talos newsletter recounts an attempted business email compromise against a small volunteer-run community association, in which an attacker impersonated the chair in emails to the treasurer requesting a bank transfer; the treasurer verified by phone and the chair knew nothing about it. Talos says AI has changed the economics of BEC by letting attackers reconnoitre many small organizations cheaply and tailor content to each target, making the attack an accessible playbook rather than a labour-intensive campaign aimed at large payouts.
Why it matters: Attackers now find it worth targeting a small nonprofit for a modest sum, because scamming many small victims can be as profitable as scamming a few large ones - and funds move through money mules and compromised accounts fast enough to sharply cut recovery odds.
Read the original at Cisco Talos ↗
- Topics
- Phishing & Social Engineering
- Related
- US disrupts North Korean campaign behind $400 million crypto theft Cyber Risks · Nov 14, 2026North Korea ‘s Crypto Theft Operations: DOJ Seizes $1.2 Billion and Disrupts Hacker Infrastructure Cyber Risks · Nov 13, 2026FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls Cyber Risks · Nov 13, 2026