Compromised External Email Account

The message came from a real mailbox at another organization, such as a supplier or partner, that an attacker had taken over. It can look genuine and even continue real conversations.

Also known as
Aliases
  • vendor email compromise (VEC)
  • hacked email account
  • email account compromise (EAC)
Broader terms
  • Compromise Accounts: Email Accounts
Mapped to
MITRE ATT&CK®

Connected in PH!SH