Two fresh business email compromise (BEC) tactics have emerged onto the phishing scene. Scammers are targeting victims by redirecting legitimate out-of-office replies from an employee to them. In the other, read receipts are being manipulated to evade email security filters. Both styles were seen being used in the wild in the U.S. in December, when auto-responders were more prevalent due to holiday vacation. The volume of BEC attacks has continued to grow, rising by 15 percent quarter-over-quarter in Q3 of 2020.
Source: https://threatpost.com/microsoft-365-bec-innovation/163508/