When attackers target financial institutions, they often use realistic invoices and vendor impersonation. We’ve even witnessed carefully planned BEC attacks that rely on inside information gleaned from spying on email communications. Defending against highly coordinated attacks like this requires not just thorough defence measures, but active anti-spoofing and anti-phishing mechanisms.