A man was arrested in 2017 for carrying out a two-pronged BEC attack targeting tech giants Facebook and Google. This lone actor managed to cause roughly $120 million dollars in losses between both companies.

The crime was carefully plotted over a two-year period between 2013 and 2015 by Evaldas Rimasauskas, who impersonated an individual at tech company Quanta Computer. Rimasauskas spoofed fake emails, attorney letters, invoices, and other official-looking materials to trick employees into false bank transfers.

Back in August 2015, IT giant Ubiquiti reported fraud to U.S. Securities and Exchange Commission to the tune of nearly $47 million dollars.

No one is totally sure exactly how the fraud was committed. However, it is likely a case of account takeover (or ATO) fraud facilitated through a BEC attack. The scam showed signs consistent with social engineering.

Even automobile super-conglomerate Toyota is susceptible to BEC attacks. In 2019, Japan’s Toyota Boshuku Corporation lost about $37 million dollars to a BEC scam.

Toyota has not commented publicly on exactly how the hackers carried out the attack. That said, it’s likely that the scam involved internal emails sent from fraudsters posing as senior Toyota executives.

In 2014, an employee of Scouler Corporation in Omaha, Nebraska answered an email from his boss, Chuck Elsea. The email explained that Elsea was keen to acquire a Chinese company and requested that the employee contact a lawyer to facilitate the funds transfer required to purchase the company. This email was, of course, part of a scam attack.

In the end, the company lost $17.2 million dollars in the scam.

Obinwannae Okeke, a lauded entrepreneur, was sentenced to 10 years in prison for his involvement in a BEC scam that cost victims an estimated $11 million dollars. Okeke used every trick in the business email compromise arsenal to defraud companies and individuals, such as phishing, social engineering, ATO fraud, false webpage creation, and domain engineering.