72% of BEC attacks were from free webmail domains

A report found that fraudsters are calling potential victims directly and luring them with messages containing a phone number for the target to call.