Business Email Compromise (BEC) is best described as a phishing attack that impersonates a known source to obtain what?

• A. To Obtain Credentials
• B. To Distribute Malware
• C. To Obtain Financial Advantage
• D. To Gather Personal Data

Answer: (C)

This question tests what motivates Business Email Compromise. The attacker pretends to be a trusted source to get someone to transfer money or change payment details, directly aiming for financial gain. Because the primary goal is to move funds, obtaining financial advantage is the best description of the attack.

While attackers in other phishing scenarios might want to steal credentials, spread malware, or gather personal data, those outcomes aren’t the central aim of BEC. In practice, you’ll see requests like urgent wire transfers or altered invoices that exploit trust to empty a business’s accounts.