Many businesses live and breathe within the email inbox – and threat actors know it. When an organization suspects business email compromise, we quickly respond by doing whatever necessary to revoke access, investigate, and pinpoint any and all activity during the compromise.
A form of cyber crime, Business Email Compromise targets organizations by infiltrating email account(s) to achieve a specific outcome such as social engineering or wire transfer fraud to negatively impact the target organization.
Based on what we see most often, here are some ways to protect yourself against this threat.
Requiring a second factor for users to authenticate upon logging into email and other systems could very well prevent an instance of business email compromise. When attempting compromise, malicious actors try to log into a business email account. If a code in a text message or QR code is required to proceed further, they could be stopped in their tracks.
Outdated systems often present as a window of opportunity for threat actors. Patches and updates address security vulnerabilities and bugs that may leave you more susceptible to compromise.
Inform your team of the latest threats and risks so they know how to identify, and most importantly, avoid phishing and social engineering attempts.
Regularly review security tools such as audit logs to identify irregularities such as email forwarding rules, rapid geographical IP address shifts, etc.
If you find yourself suspecting or dealing with business email compromise, here’s how we help.
All of our incident response cases start with a free consultation. We discuss the situation with you to determine if incident response services are recommended.
Our team of experienced investigators then dive in to your systems to first ensure malicious actors no longer have access and the proper protections like multi-factor authentication are in place. We then determine what happened and to what extent.
Based on the findings and your privacy counsel’s request, we create a full report and walk though it with you so you fully understand our conclusions and recommended next steps.
While many cases do not require expert testimony, it’s often the most important component of those that do. Similar to the report review, we provide clear and comprehensive explanation throughout court proceedings.
740 Regent Street, Ste. 203
Madison, WI, United States
(608) 509-4445
[email protected]
Mon.-Fri.:
8:00 a.m.-5:00 p.m. CST