Attackers send spam and virus via e-mail or include malicious URLs they can leverage to carry our phishing and spear phishing attacks. They also send different types of malware that businesses with signatures and classic anti-virus technologies aren’t able to detect. Although the traditional concept of a perimeter has come a long way, the fact remains that securing e-mails is the most important step for a company to take to reduce risks and avoid issues.
Even with robust e-mail security perimeters, attacks can find their way through defences and operate within an e-mail network by exploiting compromised user accounts and social engineering to send malicious e-mails to employees, customers and partners. Employees are also susceptible to opening attachments, clicking on links and falling for scams. It is, therefore, no surprise that human error is a factor in the majority of successful attacks.
It is quite easy for attackers to register look-alike websites and fake domains on the internet without even having to worry about secured corporate interfaces. Even inexperienced attackers can register ad similar domain name or host a website, the sole purpose of which is to trick customers, partners and employees, damaging the value, reputation and trust well-known brands have put a lot of effort into building up.
