Increasing Threat of Vendor Email Compromise (VEC) and Business Email Compromise (BEC) Attacks in the Global Financial Services Industry

The global financial services industry is facing a growing and alarming threat in the form of Vendor Email Compromise (VEC) and Business Email Compromise (BEC) attacks. Over the last year, VEC attacks have witnessed a staggering 137% increase, posing significant risks to the industry’s security. These attacks mainly involve socially engineered email attacks, with financial institutions receiving an average of 200 advanced attacks per 1000 mailboxes each week. To understand the severity of this issue, it is important to delve into the statistics and examples that highlight the magnitude and intricacy of these attacks.

Statistics on DDoS attacks

According to recent reports, the financial services industry has become a prime target for VEC attacks. In just one year, there has been a massive increase of 137% in these attacks. Socially engineered email attacks, designed to manipulate recipients, account for the majority of these threats. Financial institutions, on average, face 200 advanced attacks per 1,000 mailboxes every week, indicating the relentless nature of these attacks and the urgent need for heightened security measures.

Peak attack periods

Notably, VEC attacks exhibit certain peak periods throughout the year. Late January, late September, and mid-December have emerged as critical periods when the financial sector experiences a surge in attacks. These periods coincide with various financial activities and holidays, making them opportune times for threat actors to exploit vulnerabilities within email communications.

Understanding Vendor Email Compromise (VEC)

VEC is a form of cyberattack in which threat actors impersonate legitimate business providers, such as vendors or suppliers, to manipulate financial transfers. By gaining access to email accounts of these trusted entities, attackers exploit their relationships with financial institutions to trick individuals into executing fraudulent transactions. This form of attack relies heavily on social engineering techniques and the manipulation of trust to deceive recipients.

High-Value VEC attacks

Reports have revealed instances of VEC attacks targeting millions of dollars, highlighting the devastating impact they can have on financial institutions. One alarming case involved a staggering $36 million being targeted through a VEC attack. This case serves as a striking example of the financial repercussions that can be inflicted on organizations and the urgent need for robust security measures.

In another instance, an Australian financial holding company fell victim to a meticulously orchestrated $1.4 million VEC attack. The detailed example illustrates the intricacy and sophistication of these attacks, revealing the extent to which threat actors can exploit vulnerabilities in the financial services industry.

Rise in Business Email Compromise (BEC) attacks

The financial services industry has not only witnessed a surge in VEC attacks but has also experienced a 71% increase in Business Email Compromise (BEC) attacks in recent years. BEC attacks, unlike typical cyberattacks, do not rely on malicious links or attachments but instead leverage social engineering tactics to manipulate individuals into compromising financial information or executing fraudulent transactions. This makes BEC attacks particularly difficult to detect and prevent using traditional security tools.

Effectiveness of Business Email Compromise (BEC) Attacks

Despite lacking the typical indicators of a cyberattack, BEC attacks have proven to be highly effective in breaching organizational defenses. In fact, text-based BEC attacks recorded a median open rate of nearly 28% last year alone. This staggering open rate highlights the success of these attacks, emphasizing the importance of employee awareness and enhanced security measures to combat this growing threat.

Challenges posed by advanced attacks

VEC and BEC attacks pose significant challenges to the financial services industry, both in terms of legacy email security systems and human vigilance. These attacks have become increasingly sophisticated, combining authenticity with subtle changes to evade detection. The ability of threat actors to exploit trust and manipulate financial transactions requires a comprehensive approach to security, blending advanced technologies, employee training, and ongoing assessment.

The increasing prevalence and efficacy of Vendor Email Compromise (VEC) and Business Email Compromise (BEC) attacks in the global financial services industry demand immediate attention. The statistics and examples presented highlight the urgency for enhanced security measures and increased employee awareness. Financial institutions must invest in robust security solutions, raise awareness about these attacks, and regularly assess and update their defenses to stay ahead of the evolving threat landscape. Only with a multifaceted approach can the industry safeguard itself against these sophisticated attacks and protect the financial well-being of organizations and individuals alike.

Explore more

Why Are Small Businesses Losing Confidence in Marketing?

In the ever-evolving landscape of commerce, small and mid-sized businesses (SMBs) globally are grappling with a perplexing challenge: despite pouring more time, energy, and resources into marketing, their confidence in achieving impactful results is waning, and recent findings reveal a stark reality where only a fraction of these businesses feel assured about their strategies. Many struggle to measure success or

How Are AI Agents Revolutionizing Chatbot Marketing?

In an era where digital interaction shapes customer expectations, Artificial Intelligence (AI) is fundamentally altering the landscape of chatbot marketing with unprecedented advancements. Once limited to answering basic queries through rigid scripts, chatbots have evolved into sophisticated AI agents capable of managing intricate workflows and delivering seamless engagement. Innovations like Silverback AI Chatbot’s updated framework exemplify this transformation, pushing the

How Does Klaviyo Lead AI-Driven B2C Marketing in 2025?

In today’s rapidly shifting landscape of business-to-consumer (B2C) marketing, artificial intelligence (AI) has emerged as a pivotal force, reshaping how brands forge connections with their audiences. At the forefront of this transformation stands Klaviyo, a marketing platform that has solidified its reputation as an industry pioneer. By harnessing sophisticated AI technologies, Klaviyo enables companies to craft highly personalized customer experiences,

How Does Azure’s Trusted Launch Upgrade Enhance Security?

In an era where cyber threats are becoming increasingly sophisticated, businesses running workloads in the cloud face constant challenges in safeguarding their virtual environments from advanced attacks like bootkits and firmware exploits. A significant step forward in addressing these concerns has emerged with a recent update from Microsoft, introducing in-place upgrades for a key security feature on Azure Virtual Machines

How Does Digi Power X Lead with ARMS 200 AI Data Centers?

In an era where artificial intelligence is reshaping industries at an unprecedented pace, the demand for robust, reliable, and scalable data center infrastructure has never been higher, and Digi Power X is stepping up to meet this challenge head-on with innovative solutions. This NASDAQ-listed energy infrastructure company, under the ticker DGXX, recently made headlines with a groundbreaking achievement through its