BEC

5 posts

Business email compromise (BEC) turns a hijacked mailbox into a fraud tool: attackers use mail rules, auto-forwarding, and payment redirection to steal money while staying invisible to the account owner. Alongside a first-hand case study of a BEC attack that nearly cost an engineering firm millions, Push breaks down these mailbox persistence tricks and how to detect them.

Proofpoint x Push: Why browser security is now a non-negotiable for security teams

Push Security is partnering with Proofpoint, bringing Push’s in-browser threat protection to Proofpoint customers.

Company news

Adam

Sep 29, 2026

// Read

AI attacks Public breach Legitimate service abuse

Browser threat landscape: mid-year update 2026

PhaaS industrialization, Scattered Spider copycats, and AI-augmented tooling — what the threat landscape looks like in 2026 so far.

Thought leadership

Dan

Aug 10, 2026

// Read

Phishing Identity security Social engineering

Case study: Business Email Compromise (BEC) attack nearly cost us millions

A story by the owner of an Engineering company on how they almost lost millions from a Business Email Compromise (BEC) style attack. An interesting BEC example.

Breach analysis

Tyrone

Jun 13, 2021

// Read

Identity security Phishing Detection & response

Email security: How hackers use mail rules to access your inbox

After phishing campaigns target Office 365 and Google Workspace users, malicious mail rules are automatically added to the user’s mailbox. Take steps to defend.

Threat research

Andy

Jun 9, 2021

// Read

Identity security Detection & response DLP

Should you disable external email auto-forwarding?

External email auto-forwarding is a feature but also a risk; learn whether you should disable it, and, if you can't, how to manage the risk through detection.

Thought leadership

Andy

Jun 2, 2021

// Read

BEC

Proofpoint x Push: Why browser security is now a non-negotiable for security teams

Browser threat landscape: mid-year update 2026

Case study: Business Email Compromise (BEC) attack nearly cost us millions

Email security: How hackers use mail rules to access your inbox

Should you disable external email auto-forwarding?

Subscribe to get updates from Push