Speaker: Christian Kollee Business Email Compromise (BEC) is one of the most underestimated cyber threats of our time and simultaneously the most common incident type handled by Eye Security's SOC: over 180 cases this year alone. This talk examines the attack technique that has become the standard today: the Adversary-in-the-Middle attack. This method enables attackers to bypass conventional multi-factor authentication in a targeted manner, rendering one of the most important security controls ineffective. We will demonstrate how AitM attacks work in technical terms, why they are so dangerous, and what concrete measures organisations can take to effectively protect their employees.