Keeping your people and data safe
Specialists in Microsoft products and services
Access your email and documents on the go, wherever you are
18-07-2023
In recent years, electronic mail (email for short) has become an essential part of our daily lives. Many people use it for various purposes, including business transactions. With the increasing dependence on digital technology, cybercrime has grown. A significant cyber threat facing businesses today is Business Email Compromise (BEC).
Why is it important to pay particular attention to BEC attacks? Because they’ve been on the rise. BEC attacks jumped 81% in 2022, and as many as 98% of employees fail to report the threat.
Business Email Compromise (BEC) is a type of scam in which criminals use email fraud to target victims. These victims include both businesses and individuals. They especially target those who perform wire transfer payments.
The scammer pretends to be a high-level executive or business partner. Scammers send emails to employees, customers, or vendors. These emails request them to make payments or transfer funds in some form.
According to the FBI, BEC scams cost businesses around $1.8 billion in 2020. That figure increased to $2.4 billion in 2021. These scams can cause severe financial damage to businesses and individuals. They can also harm their reputations.
BEC attacks are usually well-crafted and sophisticated, making it difficult to identify them. The attacker first researches the target organization and its employees. They gain knowledge about the company’s operations, suppliers, customers, and business partners. Much of this information is freely available online. Scammers can find it on sites like LinkedIn, Facebook, and organizations’ websites. Once the attacker has enough information, they can craft a convincing email. It's designed to appear to come from a high-level executive or a business partner.
The email will request the recipient to make a payment or transfer funds. It usually emphasizes the request being for an urgent and confidential matter. For example, a new business opportunity, a vendor payment, or a foreign tax payment.
The email will often contain a sense of urgency, compelling the recipient to act quickly. The attacker may also use social engineering tactics. Such as posing as a trusted contact or creating a fake website that mimics the company's site. These tactics make the email seem more legitimate.
If the recipient falls for the scam and makes the payment, the attacker will make off with the funds. In their wake, they leave the victim with financial losses.
BEC scams can be challenging to prevent. But there are measures businesses and individuals can take to cut the risk of falling victim to them.
Organizations should educate their employees about the risks of BEC. This includes providing training on how to identify and avoid these scams. Employees should be aware of the tactics used by scammers. For example, urgent requests, social engineering, and fake websites.
Training should also include email account security, including:
Organizations should implement email authentication protocols.
This includes:
These protocols help verify the authenticity of the sender's email address. They also reduce the risk of email spoofing. Another benefit is to keep your emails from ending up in junk mail folders.
Organizations should deploy payment verification processes, such as two-factor authentication. Another protocol is confirmation from multiple parties. This ensures that all wire transfer requests are legitimate. It’s always better to have more than one person verify a financial payment request.
Organizations should deploy payment verification processes, such as two-factor authentication. Another protocol is confirmation from multiple parties. This ensures that all wire transfer requests are legitimate. It’s always better to have more than one person verify a financial payment request.
Organizations should establish a response plan for BEC incidents. This includes procedures for reporting the incident. As well as freezing the transfer and notifying law enforcement.
Businesses and individuals can use anti-phishing software to detect and block fraudulent emails. As AI and machine learning gain widespread use, these tools become more effective. The use of AI in phishing technology continues to increase. Businesses must be vigilant and take steps to protect themselves.
It only takes a moment for money to leave your account and be unrecoverable. Don’t leave your business emails unprotected. Give us a call today to discuss our email security solutions.
01225 701 650Article used with permission from The Technology Press.
26-12-2023
19-12-2023
13-12-2023
05-12-2023
28-11-2023
14-11-2023
08-11-2023
Our customers need a reliable IT support provider that is prepared to make sure every support case is completed with a satisfactory conclusion for you the customer. With Sound Networks working alongside you, your staff and company will consistently benefit from:
Great customer service
Speak directly to support engineers
Fast response times
Great pricing
Sleeping well at night
Sound Networks IT provider
Providing IT support for the last 20 years, we have developed a wealth of knowledge and experience in the IT support field. Reaping the benefits of fast internet connections and modern tools, we are able to combine this with our acquired IT skill set to help us to help you. Most of our IT support is provided via remote session, but occasionaly an onsite visit is the only option, plus, sometimes it's just nice to see a friendly face instead! Some of the customers that chose to work with us in our first year of trading are still with us now, we like to think that says something.
Regular Technology Business Reviews to keep your IT on track and aligned with your business goals.
Raise cases via email, telephone, or support agent.
Friendly approachable support engineers that will find and fix problems.
