The First 24 Hours After a Business Email Compromise

Fraudulent wire or compromised inbox? What to do in the first 24 hours of a business email compromise — the bank call, the evidence, and evicting the attacker