Business Email Compromise | Detection.FYI

Business Email Compromise: Masked recipients with suspicious reply-to mismatch (unsolicited)
May 30, 2023 · Suspicious sender Suspicious headers Business Email Compromise ·
Share on:
This rule detects unsolicited messages where the recipient matches the sender address and no other recipients are identified. The reply-to address does not match the sender, and is a freemail with no links in the body. This a common combination of techniques used by low level BEC threats.

Read More
Body: Business Email Compromise (BEC) attempt from unsolicited sender
May 26, 2023 · Machine Learning Natural Language Understanding Suspicious sender Business Email Compromise ·
Share on:
Detects potential Business Email Compromise (BEC) attacks by analyzing text within the email body from unsolicited senders.

Read More
BEC with unusual Reply-to or Return-path mismatch
May 25, 2023 · Suspicious sender Business Email Compromise Natural Language Understanding ·
Share on:
Detects an unusual header mismatch where the sender is not a freemail address, but the reply-to or return-path are. NLU also detects a BEC intent with medium or high confidence.

Read More
Body: Business Email Compromise (BEC) attempt from first-time sender
Feb 21, 2023 · Machine Learning Natural Language Understanding Suspicious sender Business Email Compromise ·
Share on:
Detects potential Business Email Compromise (BEC) attacks by analyzing text within the email body from first-time senders.

Read More