BEC (business email compromise)

A scam where an attacker compromises or spoofs a business email account (often a supplier's) and injects a fake instruction — a changed bank account for an invoice, most commonly — into what looks like a normal thread. The defence is always the same: verify any payment-detail change by phone, using a number you already had on file, before paying.