Now we will discuss business, email, compromise, attack a business email compromises when an attacker
hacks into a corporate email account and impersonate the real owner to defraud the company, its customer
partners and employees into sending money or sensitive data to the attackers account business email
compromise is also a type of man in the middle attack.
This is derived from the man in the middle attacked where two parties thinks that they are talking to
each other directly.
But in reality, an attacker is listening in and possibly altering the communication.
The attacker will try to gain access to the executive's email account to remain undetected.
He or she might use in walks rules or change the reply to address so that when the scam is executed,
the executive will not be alert.
Another trick is to create an email with a spoofed a domain.
For example, the attacker might use John Lloyd-Smith Ateret same one each dot com instead of doing
not make a direct simple dot com or John dot smith head, believe me, dot com instead of John Smith
had, believe me, dot com.
Here he changes the spelling of believe me from me and I leave it to me and EIB.
If you do not pay close attention, it is easy to get fooled by this slight difference.
One of the most famous spoofed domain tricks ever was the PayPal dot com, where the attacker changed
the spelling from Betawi.
Be able to be a VIP one.