As Work and Home Blend, Lost and Stolen Devices Threaten Security Solutions
Companies need a plan to secure employee devices before lost and stolen devices lead to major data breaches. By Tim Pritchett
Jeanette Dubon : Jul 7, 2023 2:24:40 PM
Email scammers are aiming for high returns and aren’t afraid to go for the big bucks or the big names. Even with advanced malware protection and security solutions, celebrities and C-level executives can get caught up in scams. Fortunately, there are several easy ways to guard against these attacks.
By Tim Pritchett
Barbara Corcoran, one of the celebrity judges on Shark Tank, almost fell for a spear phishing scam. Spear phishing is a targeted email scam directed at an individual based on their role and access to resources in an organization.
The scheme wasn’t that complex. Hackers in China created a fake email address that was so close to one in Corcoran’s company that no one noticed. Using that email, they requested a $400,000 transfer for a “construction project” and almost got it, until a few people realized there was something wrong with the email address.
Celebrities are one thing, but despite advanced security solutions this happens to C-level executives all the time, mainly because their names and profiles are public. I’ve seen bad actors try to scam school superintendents, CTOs, and even payroll processing employees. Many of these scams involve tricking the high-level employee to authorize a monetary transaction or change direct deposit information on a bank account.
Better policies = better cybersecurity
While advanced malware protection, security software and other cybersecurity technology can help, consistent company security policies with executive buy-in are the most effective strategies.
For example, say the CFO of a company sets an automatic out-of-office (OOO) message to let clients and co-workers they’re on vacation. The information revealed in these messages can raise your level of risk and even serve as an invitation for hackers to orchestrate an attack. If hackers learn the CFO is out of town, they could impersonate the CFO via email and ask company employees to change bank details or transfer funds, with a message like, “Since I’m out of town, do you think you could help me with this?”
A couple of security policies could help thwart this type of targeted phishing attack.
Although we work as managed IT services providers, our job always brings us back to the human factor. Do companies understand the risk? Will they follow the policies put in place? We’ve found that when we work in a strategic partnership with a business, we can customize security checks and policies that keep people sane, that don’t slow down business practices, but that also allow them to be cautious in a world where cyberattacks are common.
If you’d like to see how your policies measure up, contact us for a free cybersecurity assessment. We’ll learn more about what you currently have in place and provide feedback based on our experience. We have security solutions for SMBs as well as for enterprise-level companies. Have your company executives been targeted by a phishing attack? What happened?
Companies need a plan to secure employee devices before lost and stolen devices lead to major data breaches. By Tim Pritchett
Businesses invest in many forms of insurance to protect their assets. From commercial property insurance covering damage to your building or...
Any business owner who has looked into the many cybersecurity services available doubtless realizes that an endless amount of money can be poured...
Matrix Integration’s expertise and access to cutting-edge technology positions us to provide the right technology solutions for the critical challenges you face.