{"id":11118,"date":"2025-06-24T17:55:40","date_gmt":"2025-06-24T17:55:40","guid":{"rendered":"https:\/\/colemandev.directivesites.com\/how-business-email-compromise-puts-your-business-at-risk\/"},"modified":"2025-06-24T20:00:24","modified_gmt":"2025-06-24T20:00:24","slug":"how-business-email-compromise-puts-your-business-at-risk","status":"publish","type":"post","link":"https:\/\/colemantechnologies.directivesites.com\/?p=11118","title":{"rendered":"How Business Email Compromise Puts Your Business at Risk"},"content":{"rendered":"
\n
\n
\n\"BadBEC\"
\n<\/a>\n<\/div>\n

Can you tell the difference between your colleagues and a scammer with access to their email account? This is essentially what a business email compromise attack involves\u2014a scammer initiates a phishing scheme using an internal mode of communication. These scams are also observed in schools, making them dangerous in the education sector.<\/p>\n

Today, we\u2019re exploring how to navigate these attacks safely and what\u2019s at stake if you don\u2019t.<\/p>\n

How BEC Works<\/h2>\n

Most employees won\u2019t think twice if they receive a request for information\u2014especially if it comes from a trusted company entity.<\/p>\n

Business email compromise is an attack that uses an essential business communication tool to fool the victim into handing over the information directly. In some cases, the attacker might even receive direct access to the information they seek. There are no two ways about it\u2014this situation is bad, full stop.<\/p>\n

Here\u2019s how it works:<\/p>\n

    \n
  1. A scammer will select a target, research it, and potentially even craft a fraudulent website to make their efforts that much more effective.<\/li>\n
  2. The scammer then breaches the company\u2019s email systems and identifies the most effective targets based on the emails they send and conversations they hold.<\/li>\n
  3. Spoofing an email domain, the scammer prepares to impersonate the right person to influence their target.<\/li>\n
  4. The scammer then contacts the target, working to build up enough trust to make the ask\u2014whether for money (often in the form of gift cards) or data.<\/li>\n<\/ol>\n

    These attacks are increasingly becoming more significant problems for schools and educational institutions.<\/p>\n

    Public Sector Organizations Are At Risk<\/h3>\n

    Schools and public institutions find themselves the target of these attacks for a couple of reasons:<\/p>\n

      \n
    • Many such organizations have only a limited budget for cybersecurity, making them more likely to be targets of a cyberattack.<\/li>\n
    • These organizations also commonly exchange large amounts of capital regularly, giving an attacker more opportunities to strike.<\/li>\n
    • Many of these organizations also rely on complex administrative structuring and processes, making them even more vulnerable as issues are missed and the right people are required to sign off on any action.<\/li>\n
    • The public sector also typically collects a lot of data throughout its operations, which means that a cybercriminal would be interested in obtaining these stores.<\/li>\n<\/ul>\n

      It makes sense that schools in California and Tennessee have been targeted by these attacks, given how much hackers stand to gain from a successful strike. These institutions can sustain damages of up to six or even seven figures. But those are just the direct costs, not to mention the other damages to reputations and penalties.<\/p>\n

      All of these are reasons to consider your own approach to securing your business from BEC attacks.<\/p>\n

      What You Can Do to Mitigate Business Email Compromise<\/h2>\n

      We recommend that all British Columbia businesses take the following security precautions for BEC:<\/p>\n

        \n
      • Adequately protect financial data and other sensitive information.<\/strong> A precautionary audit can help you determine what is at risk and where your vulnerabilities lie.<\/li>\n
      • Consider a cyber insurance policy.<\/strong> Cyberattacks are more commonplace than natural disasters these days, so you should have plans in place to protect you against the financial costs that could result (just make sure you know what\u2019s covered and what limits exist).<\/li>\n
      • Prioritize compliance.<\/strong> All businesses are subject to certain compliance requirements, and failing to maintain the standards required by government or industry could result in hefty fines should your business fall victim to a scam.<\/li>\n
      • Monitor your infrastructure at all times.<\/strong> There are tools out there that can help you detect BEC attacks before they become a problem\u2014like, say, a compromised account before it can be leveraged against your staff.<\/li>\n<\/ul>\n

        With these measures in place, we\u2019re confident you\u2019ll be in a much better position to identify and prevent BEC attacks.<\/p>\n

        If you\u2019re worried about your business\u2019 security, you can rely on Coleman Technologies to keep you safe. Learn more today by calling us at (604) 513-9428.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

        Can you tell the difference between your colleagues and a scammer with access to their email account? This is essentially what a business email compromise attack involves\u2014a scammer initiates a phishing scheme using an internal mode of communication. These scams are also observed in schools, making them dangerous in the education sector. Today, we\u2019re exploring […]<\/p>\n","protected":false},"author":16,"featured_media":11032,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[86,129,31],"tags":[],"class_list":["post-11118","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-current-events","category-email","category-security"],"_links":{"self":[{"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=\/wp\/v2\/posts\/11118","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=\/wp\/v2\/users\/16"}],"replies":[{"embeddable":true,"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=11118"}],"version-history":[{"count":1,"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=\/wp\/v2\/posts\/11118\/revisions"}],"predecessor-version":[{"id":12344,"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=\/wp\/v2\/posts\/11118\/revisions\/12344"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=\/wp\/v2\/media\/11032"}],"wp:attachment":[{"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=11118"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=11118"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=11118"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}