The U.S. Securities and Exchange Commission released an investigative report earlier this month detailing how spoof emails at nine publicly traded companies caused them to lose approximately $100 million in total.

The method of attack was similar for each company: Perpetrators sent emails to employees of the unnamed companies purporting to be executives seeking a wire transfer, or a vendor looking for any unpaid invoices.