What makes a BEC attack different than a typical phishing email?

The attack is aimed at everyone who has worked at the company for more than a year.

The attack is personalized. It targets one specific person within a company.

The attack is not personalized. It targets all of the highest management within a company.

The attack is random, and anyone at the company might be a victim.