BEC (business email compromise) has certainly gained traction in the past couple of years.
Henderson ISD, a school district in Texas, recently lost more than $600,000 in a BEC attack.
Only a few details on the attack have been issued by district officials.
The district sent a payment of $609,615.24 to RPR Construction Company Inc., the organisation overseeing the building of a stadium.
School officials discovered the payment did not go to RPR, but into fraudulent account and that the district was tricked into doing so through a BEC attack.
TPRM report: https://scoringcyber.rankiteo.com/company/henderson-isd
"id": "hen1125291022",
"linkid": "henderson-isd",
"type": "Breach",
"date": "10/2018",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"
{'affected_entities': [{'industry': 'Education',
'location': 'Texas',
'name': 'Henderson ISD',
'type': 'School District'}],
'attack_vector': 'Phishing/Email Spoofing',
'description': 'Henderson ISD, a school district in Texas, recently lost more '
'than $600,000 in a BEC attack. The district sent a payment of '
'$609,615.24 to RPR Construction Company Inc., the '
'organisation overseeing the building of a stadium. School '
'officials discovered the payment did not go to RPR, but into '
'a fraudulent account and that the district was tricked into '
'doing so through a BEC attack.',
'impact': {'financial_loss': '$609,615.24'},
'motivation': 'Financial Gain',
'title': 'Business Email Compromise (BEC) Attack on Henderson ISD',
'type': 'BEC (Business Email Compromise)'}