BEC-Buisness Email Compromise attacks are email scams against commercial, governmental, or nonprofit organizations that are intended to motivate employees in the organization, through social engineering, to take action in favor of the attacker.

1. During 2019, a number of articles were published on the Internet indicating a new phenomenon of committing BEC scams through text messages (SMS messages).
2. Also, recently at the National CERT there have been reports of a new BEC method that allows through dedicated software to perform voice impersonation to company executives, thus getting the organization’s employees to perform actions in favor of the attacker.
3. The purpose of this document is to raise awareness of the types of scams listed above, and to provide recommendations for defending against them.
4. More details in the attached file