{"success":true,"data":{"id":"ai-generated-invoice-bec-lookalike-domain","label":"AI-generated invoice BEC with lookalike domain — plausible invoice from a typosquat vendor domain with changed banking / wire-transfer details mid-transaction. Abnormal Security 2025-2026; FBI IC3 2025 BEC $2.9B; distinct from fake-invoice-callback (phone-number shape).","description":"AI-generated invoice emails from lookalike vendor domains containing plausible invoice details (PO numbers, project references) but with changed banking / wire-transfer instructions. Two-part detection: (1) invoice attachment / billing statement reference with payment due, (2) explicit notice that banking details / wire instructions have changed or been updated. Distinct from fake-invoice-callback (which uses a phone callback number) and from ai-vishing-follow-up-bec-wire-transfer (which references a prior phone call). Abnormal Security 2025-2026 documented widespread AI-generated BEC invoice campaigns; FBI IC3 2025 Annual Report: BEC total $2.9B, with vendor-invoice-redirect as the fastest-growing sub-category.","tier":"warning","category":"sender","isThin":false}}