What does BEC stand for in cybersecurity contexts?

• A. Bank Email Compromise targeting financial accounts
• B. Business Email Compromise targeting organizations
• C. Binary Encryption Control
• D. Business Encryption Certificate

Answer: (C)

BEC in cybersecurity contexts stands for Business Email Compromise. It’s a type of social engineering where attackers gain access to a legitimate business email account or pose as someone within the organization or a trusted partner. The goal is to trick employees into taking actions that benefit the attacker, such as transferring funds, paying fraudulent invoices, or divulging sensitive information. This often involves careful mimicry of real communications, urgent language, and requests that appear legitimate.

The other terms don’t fit the established meaning. Binary Encryption Control isn’t a recognized cybersecurity term related to email fraud, and terms like Bank Email Compromise or Business Encryption Certificate describe different concepts entirely and aren’t the standard abbreviation for this threat.