business email compromise attacks (bec) are a form of cyber crime which use email fraud to attack commercial, government and non-profit organizations to achieve a specific outcome which negatively impacts the target organization. examples of common bec attacks include invoice scams and spear phishing spoof attacks which are designed to gather data for other criminal activities. often consumer privacy breaches occur as a results of a bec attack.