Business email compromise (BEC) attacks are exploits where cybercriminals get unauthorized access to a business email account to steal the owner’s identity. The compromised accounts are then used for carrying out highly convincing social engineering scams against employees, partners, and customers.