Security News > 2022 > December > Business email compromise attacks now targeting people via SMS messages
A business email compromise attack is a type of scam aimed at an organization's employees in which the attacker impersonates a top executive or other trusted person associated with the business.
While BEC attacks usually occur via email, they're now using SMS text messages to hit recipients.
A recent report from cybersecurity firm Trustwave discusses the increase in SMS-based BEC attacks and offers advice on how to combat them.
Often the BEC attack begins with an email through which the scammer asks for the victim's phone number.
Beyond using an initial email conversation, attackers can obtain mobile phone numbers through other means.
BEC attackers typically limit their communications to text messages to avoid being uncovered in a phone call.