OCTOBER 13, 2020 VIRTUAL MEETING

TOPIC SUMMARY
Business Email Compromise (BEC) is one of the fastest growing cyberattacks affecting businesses. BEC is a type of attack where a fraudster attempts to facilitate a fraudulent payment, often a wire transfer or ACH payment, via email. Billions of dollars have been lost from this type of attack over the last several years. In this presentation, David will review how attackers perform this attack, including real life examples. David will also review key IT controls that should be implemented to mitigate this threat for your organization.

LEARNING OBJECTIVES

• Learn what BEC is and how attackers perform the attack.
• Learn how the move to the cloud has increased the attack’s effectiveness.
• Learn how to mitigate this attach with various IT controls.

David has firsthand knowledge and experience using leading edge hacking/testing methods:

• External and internal network penetration designed to gain access to high value targets.
• Social Engineering Techniques designed to assess all aspects of company security “People, Rules, and Tools”.
• Techniques for email Phishing that result in remote access to company networks, bypassing improperly configured firewalls and proxy systems.
• Domain and network management.

Education/professional involvement

• Bachelor’s of Arts, Information Technology with focus on Networking & Security, Minnesota State  University – Mankato (MNSU)
• Offensive Security Certified Professional (OSCP)

Speaking engagements

David has been a featured speaker at national conferences and training sessions related to information security including topics related to:

• Penetration testing and vulnerability assessments
• Corporate account takeovers
• Email Phishing
• Social Engineering
• Network security