Accounts payable at the county construction office receives an emai…

Question

Accounts payable at the county construction office receives an email from what looks like a long-time vendor asking to redirect the next progress payment to a new bank account. The From domain is one character off the real vendor domain. Which attack best matches this scenario?

Accepted Answer

Business email compromise using a lookalike (typosquat) domain to redirect a vendor payment — One wrong letter in the vendor domain plus a "send the check here instead" ask is textbook BEC with a lookalike domain. It is payment fraud by brand impersonation, not a phone-only scam or a USB drop. Always verify bank-change requests out of band.

Answer

Vishing that uses only a live phone call with no email involvement

Answer

A watering-hole compromise of a municipal procurement forum

Answer

A USB parking-lot drop that delivers malware through removable media

Accounts payable at the county construction office receives an email from what looks like a long-time vendor asking to redirect the next progress payment to a new bank account. The From domain is one character off the real vendor domain. Which attack best matches this scenario?

Short Explanation

Full Explanation