Takeover of mailboxes to conduct fraud (e.g., CEO fraud).
Use of outdated protocols (POP3, IMAP) to bypass MFA.
Deleting or altering traces of an action.
Automated forwarding of emails to external addresses.
Overloading systems through massive requests or resource hogging.
Gaining privileges beyond what is intended.
Accessing further internal systems after initial login.
Missing or inadequate recording of security-relevant events.
Delivering malicious content via electronic communication.
Delivering harmful file attachments to specific targets.
Delivering malicious links to obtain credentials.
Phishing via trusted cloud services (Teams, LinkedIn).
Exploiting existing credentials for access.
Exploitation of Office startup processes for code execution.
Changing permissions or creating new accounts.
Intercepting communication between two parties.
Capturing active session tokens to bypass authentication.
Extracting passwords from web browsers or password managers.
Automated exfiltration through inbox rules.
Harvesting emails directly from the server.
AYSOLI experts support you in implementing your specific security requirements.
Free consultation