They typically land in no more than 25 inboxes in an organization — on a weekday first thing in the morning, posing as an urgent or time-sensitive email from a co-worker or executive. Business email compromise (BEC) scams represent just a small fraction of spear-phishing attacks overall, but these lucrative campaigns contain a few telltale traits.

Read full article on Dark Reading