Enterprise electronic mail compromise (BEC) assaults rose 13% final month, with the common requested wire switch rising to $39,315, based on a brand new report from Fortra.
“The typical quantity requested from BEC wire switch attackers was $39,315 in February in comparison with $24,586 in January 2025, a rise of 60%,” the report says.
“Through the month of February, 25% of wire switch BEC assaults requested lower than $10,000, whereas 62% of wire switch BEC assaults requested between $10,000 and $50,000. For the opposite 12% of wire switch BEC assaults, 0% requested between $50,000 and $100,000, and 12% requested greater than $100,000.”
Most of those assaults abused authentic electronic mail providers, making them extra more likely to evade detection by safety filters.
“73% of BEC assaults had been despatched from electronic mail addresses hosted on free webmail suppliers in comparison with 27% of assaults despatched from maliciously registered domains,” the researchers write. “The share of free webmail suppliers used decreased in February in comparison with 72% in January 2025. For February 2025, Google was the first webmail supplier utilized by actors to ship BEC campaigns, comprising 76% of the 1,036 free webmail accounts utilized by scammers. Different in style webmail suppliers included Microsoft and Verizon Media.”
The researchers warn that risk actors are placing extra effort into preparation with a purpose to enhance the probability of a serious payoff. Fortra states, “Menace actors have intensified reconnaissance and profiling efforts, prioritizing bigger monetary targets and leveraging delayed fraud detection to extend operational success.”
New-school safety consciousness coaching may give your group an important layer of protection towards social engineering assaults. KnowBe4 empowers your workforce to make smarter safety choices each day. Over 70,000 organizations worldwide belief the KnowBe4 platform to strengthen their safety tradition and scale back human threat.
Fortra has the story.