Q1.

Which of the following scenarios describes a possible business email compromise attack?

Business Email Compromise (BEC) is a social engineering attack where an adversary impersonates a trusted senior colleague, like an executive, to trick an employee into performing an unauthorized action. The scenario of an email appearing to be from an executive requesting the purchase of gift cards is a classic example of a BEC scam. The attacker leverages the authority of the spoofed identity to create a sense of urgency and bypass normal verification procedures, aiming for direct financial gain.