Business email compromise (BEC) scams involve taking over or impersonating a trusted users email account to target companies that conduct international wire transfers with the goal of diverting payments to an attacker-controlled account. IBM: Threat groups of likely Nigerian origin are engaged in a widespread credential harvesting, phishing and social engineering campaign designed to steal financial assets. The objective of this report is to inform customers of the BEC threat by exposing the specific tactics used to deceive victims and offer recommendations that companies can immediately implement.”]