Describing attacks with crime script analysis

This report explains how crime script analysis can be used to narratively deconstruct business email compromise (BEC) attacks for non-technical audiences, showing each step from target identification to payment and laundering. It highlights how AI can automate reconnaissance and message personalization to scale BEC against lower-value targets, and identifies defensive intervention points including canary honeypots, AI-provider detection of malicious prompting, email provider rate-limiting, and strengthened organizational payment verification processes.