Phishing via non-technical social engineering methods, such as business email compromise, now costs businesses more than $700 million a month. This session covers how cybercriminals have evolved their tactics to exploit organizations' weakest defenses — basic human behavior. We will review research into the full attack cycle of BEC attacks, then discuss how active defense and intelligence sharing can successfully impact the BEC ecosystem.