How Security-Centric Procedures and Training Helped Huntress Catch a $100,000 BEC Scam

Huntress recounts a business email compromise where threat actors took control of a vendor’s email and sent fraudulent messages to redirect an ACH payment of roughly $103,000; the accounting team’s policy to call vendors to confirm new banking details prevented the transfer and a potential loss. The vendor’s IT disabled compromised accounts and the incident was reported to the bank, highlighting the importance of security awareness training and payment-validation procedures.