Phishing and Business Email Compromise: A Defender’s Guide
Why phishing still works, how business email compromise turns into payment fraud, and the technical and human controls that reduce the risk.
Utforska Phishing-guiden
Elva kapitel, vart och ett läsbart för sig. De flesta innehåller ett verktyg du kan använda medan du läser.
Why phishing still works
Phishing remains the most common way into an organisation because it targets people, not systems.
The anatomy of a phishing email
A phishing email combines a believable sender, a reason to act now and a link or attachment.
Business email compromise and invoice fraud
In BEC, attackers impersonate a manager or supplier to redirect payments.
Credential phishing and MFA fatigue attacks
Fake login pages steal passwords, and repeated push prompts wear users down until they approve.
Email authentication: SPF, DKIM and DMARC
These records stop attackers from sending email that appears to come from your own domain.
Filtering, sandboxing and link protection
Modern email security scans links and attachments at the time of the click, not only on delivery.
Building a reporting culture
Fast reporting turns one user into an early warning for everyone.
Running phishing simulations that teach
Simulations work when they are realistic, regular and followed by short learning.
Payment verification processes for finance teams
A simple call-back rule stops most invoice fraud.
Responding to a reported phish
A quick response limits the damage when someone has clicked or replied.
Measuring awareness: metrics that matter
Good metrics show whether behaviour is changing.
Check Your Phishing Defences
Review your email security and awareness programme and get the checklist in your inbox.
- Email security: Publish SPF, DKIM and an enforced DMARC policy. Kapitel 5 till 6
- People: Make reporting a phish quick and safe. Kapitel 7 till 8
- Finance: Verify every change of bank details by phone. Kapitel 9
Få din kostnadsfria Phishing-checklista
Levereras direkt till din inkorg.
Ingen skräppost. Datalagring inom EU. Avsluta när du vill.
Boka en säkerhetsgenomgång på 30 minuter.
Ingen säljpresentation.
Prata med en Sverigebaserad analytiker. Vi går igenom din säkerhetsnivå, kartlägger dina luckor och ger dig en tydlig bild av läget, på vanlig svenska.
Boka en kostnadsfri genomgång