Business Email Compromise (BEC) Business email compromise, or BEC for short, is an internal attack on a company. Similar to phishing, BEC attacks attempt to bait a company employee by appearing to be someone of importance within the business. This could be an email that seems to be an executive trying to gain access or information on a system. Due to businesses' nature and high efficiency levels, these attacks take time to detect. If a co-worker is digging through hundreds of emails daily on top of their work, they might not notice minor inconsistencies in a fraudulent email. Email Account Compromise (EAC) Email account compromise, or EAC for short, is a specific attack designed primarily to compromise an individual's inbox. This could be done via malware, phishing, or brute force attacks. The result is the attacker then uses the account to spread more phishing attacks to the contacts of the stolen inbox, gathering more and more personal information. This attack becomes extremely difficult to detect as these messages are technically sent from a legitimate account, but it is not the account's rightful owner. Fileless Malware Fileless malware attacks are email attacks stemming from a device's random access memory or RAM. They are not from a malicious file like ransomware or common malware but can still install and run fraudulent code on a system. They can be delivered via a phishing email and pose a threat to personal and private information. Fileless malware attacks are difficult to detect because they do not leave a trace. There is no signature (identification of files), so signature-based antivirus software cannot detect malicious content.