Why BEC Is Now an Identity Problem

Modern Business Email Compromise (BEC) has evolved into multi-stage identity-abuse campaigns that exploit OAuth/token theft, mailbox configuration features, and Google Workspace flows to achieve stealthy lateral movement, exfiltration, and persistence; defenders are urged to shift from inbox-centric detection to identity-first monitoring (ITDR) that correlates authentication, token lifecycles, mailbox changes, and cross-platform activity.