Chubb has released a new whitepaper outlining how cybercriminals have evolved their deceptive practices around email cybercrimes, including the use of Business Email Compromise (BEC). The paper, “Email: Is the Digital Door Propped Open for Identity Hijackers?” explores how BEC works, why it is successful, and the importance of using multi-factor authentication as a safeguard.
Co-authored by Chubb and Microsoft, the whitepaper provides ways in which businesses can block these increasingly complex attacks.
“BEC attacks serve as a prime example of how cybercrime is quickly evolving,” said Patrick Thielen, Senior Vice President, Chubb North America Financial Lines. “As employees become savvier about not clicking on unfamiliar links or downloading unknown attachments, cybercriminals are just as quickly pivoting to different means—hijacking email accounts and impersonating executives. These sophisticated fraud schemes often result in employees erroneously transferring money to criminals under the auspices of their bosses’ supposed directions.”
According to the authors, multi-factor authentication is a critical tool to help deter such fraud, as bad actors often access email accounts through weak passwords. An additional layer of defense or proof of identity can help ensure those individuals accessing email accounts or other sensitive company assets are who they say they are.
“Data suggests that implementing multi-factor authentication can help to reduce the risk of email compromise significantly,” shared Christopher Arehart, Senior Vice President, Chubb North America Financial Lines. “Whether using a pin, biometric data, or tools like an authentication app, multi-factor authentication is easy to implement and can help close the digital door on cybercriminals.”
“The old saw of an ounce of prevention being worth more than a pound of cure remains true in the cyber world,” said Joram Borenstein, General Manager, Modern Work, and Security Partnerships, Microsoft. “By layering authentication across multiple factors, consumers and employers make it harder for criminals to breach defenses and get at your business and personal data.”
