Security experts at the Exabeam Spotlight20 virtual conference warned of an increase in spear-phishing and account takeover attacks. Attackers are using the accounts of customers and vendors who have been the victims of a data breach. The attackers are using those accounts to request things such as invoice payments or to change payments to a new bank account. Security teams need to be more aware of data breaches involving regular clients and vendors and be on the lookout for attempts to use this type of attack for threat actors financial gain.”]
Source: https://securityboulevard.com/2020/11/targeted-spear-phishing-on-the-rise/