BEC targeted attack detection