Discussion
So i own an online retailer and we are forever having issues with people trying to hack our accounts.
However today we have had an issue where someone has managed to get into my email address and send an email that is worded like one of mine to my accounts department with an invoice for payment.
luckily my accounts team didn't recognise the business so questioned the email.
How has someone managed to do this and how hards it going to be for me to get to the bottom of the issue?
The email address they have used is my email, no one close to. They are literally sending emails from my account, the Invoice is for just shy of 20k
any one ever had anything like this?
Cheers in advance!
However today we have had an issue where someone has managed to get into my email address and send an email that is worded like one of mine to my accounts department with an invoice for payment.
luckily my accounts team didn't recognise the business so questioned the email.
How has someone managed to do this and how hards it going to be for me to get to the bottom of the issue?
The email address they have used is my email, no one close to. They are literally sending emails from my account, the Invoice is for just shy of 20k
any one ever had anything like this?
Cheers in advance!
Immediately change your email password.
Check your deleted items and deleted deleted items.
Ask someone who has received the email to send the email back to you as an attachment (drag the email from outlook to the desktop, compose a new email and drag the desktop icon to the email), this will preserve the headers. If the "Envelope" and "Header" email (Sender and reply to) addresses match, you have been hacked. If the don't match you are secure but someone is trying to defraud your clients by pretending to be you.
Check your deleted items and deleted deleted items.
Ask someone who has received the email to send the email back to you as an attachment (drag the email from outlook to the desktop, compose a new email and drag the desktop icon to the email), this will preserve the headers. If the "Envelope" and "Header" email (Sender and reply to) addresses match, you have been hacked. If the don't match you are secure but someone is trying to defraud your clients by pretending to be you.
This sort of fraud has been going on for years:
https://www.accountingweb.co.uk/business/managemen...
Good internal procedures can help and also reviewing your IT security. For instance, if you are using cloud services for e-mail (or other services), use 2FA (2 Factor Authentication) to enhance login security.
https://www.accountingweb.co.uk/business/managemen...
Good internal procedures can help and also reviewing your IT security. For instance, if you are using cloud services for e-mail (or other services), use 2FA (2 Factor Authentication) to enhance login security.
You can implement DMARC, SPF and DKIM on your DNS and mail servers which will help to prevent this problem reoccurring.
Though mail spoofing isn't always a bad thing. One of my companies clients got spoofed. The old send lots of fake invoices scam. Their phone lines were pretty much seized for over a week but they secured over £150k of new business from companies who were ringing in to complain or query the invoice and who they hadn't dealt with before.
Though mail spoofing isn't always a bad thing. One of my companies clients got spoofed. The old send lots of fake invoices scam. Their phone lines were pretty much seized for over a week but they secured over £150k of new business from companies who were ringing in to complain or query the invoice and who they hadn't dealt with before.
Edited by plasticpig on Tuesday 16th April 16:09
Gassing Station | Business | Top of Page | What's New | My Stuff