Today’s email attacks have evolved. Unfortunately, most security tools haven’t evolved with them.

Attackers are bypassing security tools with new techniques and delivery methods. And some are avoiding legacy controls altogether through novel attacks that don’t use malware at all.

Email fraud, sometimes called business email compromise (BEC), is one of them. This growing threat has cost victims more than $5.3 billion since the FBI began tracking it in late 2013. The average attack nets about $130,000.

These attacks are sophisticated and highly targeted. They exploit people, not technology. And stopping them requires a new people-centered approach.