{"success":true,"data":{"id":"supplier-payment-terms-phish","label":"Fake B2B \"update banking details / ACH redirect\" to avoid late fees — classic vendor impersonation requesting bank account update before next payment run.","description":"Fake B2B \"update your payment terms / banking details to avoid late fees\" cold email — classic vendor impersonation BEC variant requesting ACH redirect or bank account update before the next payment run. Attacker poses as an existing supplier claiming banking details have changed. Finance/AP staff who act on these requests redirect legitimate payments to attacker-controlled accounts. Detection: payment terms update/new banking information/ACH redirect vocabulary + late fee/next payment run urgency + no List-Unsubscribe + no In-Reply-To + not protected sender. Trash score: +3. Source: GC1-R19; FBI IC3 BEC supplier impersonation advisory 2025; ACFE payment diversion report.","tier":"danger","category":"phishing","isThin":false}}