Account Shield
Business Email Compromise is responsible for over $43 billion in losses. It’s important to understand what you’re up against and how you can stay safe.
What is Business Email Compromise?
It is a form of cyberattack that takes advantage of the Adversary in the Middle technique and the new cloud capabilities presented by popular software companies like Microsoft. It’s a common technique where the adversary will gain access to a user’s email to intercept information. The adversary uses this access to exploit the employee, the company, and even the company’s business partners.
Gone phishing, that’s how it all starts.
The adversary gathers email addresses from prior contact list breaches or dark web purchases. Then, using AI, they send a mass amount of sophisticated phishing emails to these users. Once clicked, the adversary gains access to the users’ email account.
Depending on an employee’s position, the adversary could inflict varying degrees of damage.
Accounting Positions
If someone is an accounting position is compromised, the adversary will use them to commit financial fraud. This means money can be misdirected from the intended recipient (like a customer or vendor) and into the adversary's hands.
Trusted Internal Users
If someone in a trusted internal position (think GM, controller, or dealer principal) becomes compromised, the adversary can use that platform of trust and authority to give out unquestioned orders, such as sending money to a new account.
IT or Admin Positions
If someone in an IT or admin position is compromised, the adversary can use this to inflict massive damage. They could change your cloud structure, add or delete users, and change access levels. The goal is to steal your data and launch a ransomware attack.
What is Account Shield?
Account Shield is a fully managed, online account and email security service for Microsoft 365 designed to safeguard your dealership from malicious actors. With this service, you license Microsoft 365, and we’ll take care of the rest:
- Evaluate the appropriate Microsoft 365 product and licensing with you to ensure you have the necessary security features to meet your business needs while minimizing expenses.
- Enable necessary security features for maximum protection, such as MFA, conditional access, activity logs, email filtering, and suspicious message banners.
- Monitor login attempts in Microsoft 365 to swiftly detect and respond to any suspicious events. In the event of a successful malicious login, we take prompt action to remove access, restore your users’ accounts to a secure state, and investigate the event in detail.
Ensure You’re Protected with Account Shield from Proton
Fill out the form to talk with one of our security experts about how Account Shield could improve your dealership’s cloud security.