BEC is a sophisticated scam aimed at businesses, typically carried out by compromising legitimate business email accounts through social engineering or computer intrusion techniques to conduct unauthorized transfers of funds or data.