There is another scam where the attacker gains access to a business email account and then uses the existing relationship to trick the recipient into sending mo

There is another scam where the attacker gains access to a business email account and then uses the existing relationship to trick the recipient into sending money to an alternate account. The attacker waits for a legitimate invoice to go out, then follows that email with a forged email specially written to convince the recipient that the payment should be sent to another account. They duplicate the name, style, and tone of the person sending the invoice by reading the archived email conversations so that they can sound more trustworthy when making an excuse for the payment change.