CrowdStrike Protects Customers from Threats Delivered via PHP2Shell Read blog
White Papers

The Expanding Scope of Business Email Compromises

Business Email Compromises (BECs) are often seen as incidents where attackers gain unauthorized access to email accounts, typically for wire fraud or theft. However, BECs are fundamentally identity compromises. In many cases, the same credentials used for email access also grant access to an organization’s Single Sign-On (SSO) system, opening the door to various cloud-based applications and remote access services, thus amplifying the potential damage.
By clicking submit, I consent to the processing of my contact information by CrowdStrike and its partners, including to CrowdStrike contacting me and sharing my contact information with its partners. I acknowledge that CrowdStrike will use and keep my contact information for as long as necessary for these purposes in accordance with its Privacy Notice.
CrowdStrike logo

Thank you for your interest!

The content you requested is now available.

Business Email Compromises (BECs) are often seen as incidents where attackers gain unauthorized access to email accounts, typically for wire fraud or theft. However, BECs are fundamentally identity compromises. In many cases, the same credentials used for email access also grant access to an organization’s Single Sign-On (SSO) system, opening the door to various cloud-based applications and remote access services, thus amplifying the potential damage.

This paper explores the shift from viewing BECs as simple financial attacks to recognizing the broader threat posed by Nation State or eCrime adversaries.
Additional Resources