BEC is a scam where an attacker poses as a director, supplier or someone in finance to trick staff into sending money, handing over data or changing bank details. The emails usually have no links or attachments, which is exactly why normal filters miss them.
