An Internet-security firm Thursday offered new insights into the perpetrators behind an increasingly popular type of cyberfraud targeting small businesses, tracing the attacks to Nigerians involved in earlier types of email scams.

In one variant of the scheme, SecureWorks Inc. said criminals break into email accounts and change bank-account information to capture payments intended for suppliers.

The...