There are plenty of scary statistics out there to keep you awake at night.
A recent CSO article on the rise of mobile phishing attacks opened with the line: “91% of all cyberattacks start with a phishing email.”
With the same study showing phishing attempts on the rise and the average cost to mid-sized companies at a cool $1.6 million, we don’t have an option: it must be a key focus area in ThirdSpace’s cyber security strategy and our defence against malicious attackers.
Fortunately, we have anti-phishing protection through Microsoft Defender for Office 365. Part of the all up Microsoft Defender holistic threat protection toolkit.
Microsoft Defender anti-phishing protection provides 3 key benefits:
With Office 365 Defender anti-phishing, you can prevent up to 20 members of your organisation from being digitally imitated.
It’s a common spear phishing technique to impersonate a CEO or high-level board member with the goal of gaining information or money from someone who reports to them.
Defender’s anti-phishing tools pay special attention to these individuals and will intercept any email that looks like it could have been sent by them, but really hasn’t.
This is achieved through machine learning models together with highly intelligent impersonation detection algorithms.
Learn about the key features of Microsoft's new holistic solution for extended detection and response (XDR) – and see it in action! We'll show you:
It’s not just individuals you can prevent from being impersonated – but domains as well!
Another common method of tricking users to provide their credentials or carry out an action is to send an email from a domain name that looks like your own.
At a glance, microsoft.com and mircosoft.com look the same.
Microsoft Defender anti-phishing will detect this and can be configured to warn the user, move the mail to their junk folder, or even block it completely before it’s delivered.
It already knows the domains you have configured in Office 365 and protects these by default, but it can be configured to protect other domains – as well as ignore those that are similar but legitimate.
In fact, whether it’s a user or domain impersonation attempt, you’ll have complete control over what happens next – from quarantining the message to providing the user with anti-phishing safety tips.
This feature is particularly advanced.
It looks at each user who has an Office 365 mailbox and learns their individual sender map. This is basically a table of who you communicate with on a frequent basis. It helps to build up a picture of legitimate relationships – for example, sister companies, customers and suppliers.
If any of these contacts are spoofed, Defender for Office 365 anti-phishing will inform you that you aren’t speaking to the person you think you are.
To enable Microsoft Defender for Office 365 anti-phishing protection, you will need an Office 365 Enterprise E5 license – although you can add-on as part of a different subscription.
The true value is when you combine anti-phishing protection with the rest of the of the Microsoft Defender holistic security suite and correctly configured Exchange Online Protection policies too. Once that’s in place, you’ll have gone a long way to protecting your organisation from a potentially expensive attack.
Next, take our two minute security operations capability assessment. Detect your biggest security priorities in minutes – and pick up your free assessment report!
Or watch our Zero Trust webinar for top tips on enabling a holistic approach to cyber protection.
Send us your questions or feedback.
Friendly folks are standing by!
Eight-time winner of the Microsoft Partner of the Year Award for Identity Management, Enterprise Mobility, and Security and Compliance.
You are seeing this because you are using a browser that is not supported. The ThirdSpace website is built using modern technology and standards. We recommend upgrading your browser with one of the following to properly view our website:Windows
Please note that this is not an exhaustive list of browsers. We also do not intend to recommend a particular manufacturer's browser over another's; only to suggest upgrading to a browser version that is compliant with current standards to give you the best and most secure browsing experience.