Business email compromise is one of those threats that feels unfair. The attacker does not need advanced malware. They just have to convince someone on your team that an email is genuine. One fake invoice, one “quick favor” from a …