Business email compromise (BEC) can look deceptively simple at first. A healthcare employee’s Microsoft 365 account is compromised. Maybe someone clicked a convincing sign-in link, approved an unexpected MFA request, or entered credentials into a page that looked legitimate. The [...]