Most businesses are now aware of Business Email Compromise (BEC), but 50 percent of management teams still are not cognizant of Business Process Compromises (BPC). what these attacks are or how their business would be impacted according to a recent survey by Trend Micro.
Justin Jett, Director of Audit and Compliance at Plixer:
“Business process compromises are a serious threat to businesses. Because businesses often deploy practices that have multi-point, and multi-people, processes, malicious actors find ways to circumvent one of these processes . They inject themselves into one of the stages artificially. Additionally, many of these processes may not require direct communication with the others in the business. So when malicious actors become part of the process, it is very difficult to discover. Network traffic analytics is a critical component in detecting and stopping these types of threats. Organizations can be warned of an artificial injection by malware authors. If they can identify where criminal actors have entered the company. Furthermore, when a business email compromise happens. IT teams can trace where the hackers went throughout the network from the compromised account.”
The opinions expressed in this post belongs to the individual contributors and do not necessarily reflect the views of Information Security Buzz.