Please update our bank details before this month's payment.The fake supplier
A real supplier changing bank details will not mind you phoning the number you already have on file to confirm it.
Email fraud · It happens more than you think
It looked real. That was the point.
Business email fraud does not look like a scam. It looks like a supplier you have paid for years, or your own director asking for a favour. Here is what we see hitting Malaysian SMEs every month.
Tricks we stop every month
Three messages worth a second look
Are you free? I need you to handle something urgent for me.The fake boss
Urgency plus secrecy plus a payment is the pattern. Real bosses can wait the two minutes it takes to verify.
Your mailbox is full. Sign in here to keep receiving email.The fake login page
The page looks right because it is a copy. Check the address bar before you type a password, every time.
When a client gets hit
We move fast, in this order
The first hour decides how much damage a compromised mailbox does. Locking the account is not enough on its own, because the rules an attacker leaves behind keep working after the password changes.
01
Trace
Find exactly how they got in, which account was used, and everything it touched.
02
Lock out
Shut every session and device, and remove the hidden mail rules attackers leave behind to keep reading.
03
Harden
Multi-factor authentication, an extra layer of email security, and staff awareness, so it does not happen twice.
93
threats blocked for one client in a single year. Zero breaches.
Protection, monitoring and tested backups are part of every Xcon plan, not an upgrade. See what each plan includes.
Not sure your email is protected?
A free IT assessment covers your email security, your backups and who can reach what. No obligation.
Schedule a free IT assessment