Shareholders and customers of ASX 100 organisations are being warned that more than 85 per cent of these companies are not using best practice for email security, leaving them vulnerable to cyber attacks.
Proofpoint’s Australian and New Zealand country manager Crispin Kerr said a large number of ASX 100 companies are “unknowingly exposing themselves to cyber criminals aiming to capitalise on intricate supply chains and potentially trick critical stakeholders with fraudulent emails”.
He noted that Australia’s companies rely on an ever-expanding ecosystem to conduct business with integral stakeholders, including suppliers, vendors, employees, customers and partners.
“And in order to be successful, these relationships are based on an inherent trust in email communications,” he continued.
Proofpoint undertook an examination of the ASX 100 that found 42 per cent of these organisations have not published a domain-based message authentication, reporting and conformance (DMARC) record, “making them susceptible to cyber criminals spoofing their identity and increasing the risk of email fraud targeting users”.
A DMARC is an email validation protocol that is designed to protect domain names from being misused by authenticating the sender’s identity before the message is allowed to reach a designation.
Additionally, only 14 per cent of ASX 100 organisations have implemented recommended deployments to block malicious emails from reaching intended targets.
“In other words, 86 per cent of Australia’s largest companies aren’t leveraging established best practices for email security,” Mr Kerr said.
“Today’s Australian business climate requires constant email communication with a multitude of manufacturers, suppliers, resellers, employees and customers.”
And with 90 percent of cyber attacks coming through email, the manager said “securing this vector has never been more important”.
“What happens when a cyber criminal impersonates a trusted vendor asking that payment is wired to a new account? Or a customer receives a fraudulent notification that they need to reset their password?” he queried.
He flagged that global impostor email attempts have increased more than 400 per cent year-on-year.
“While these are generally highly targeted attacks that are sent to specific people within organisations – those that have the authority to execute wire transfers or send sensitive information – companies were targeted 120 per cent more frequently in quarter one of 2019 versus the same quarter in 2018.”
It comes after a lawyer’s warning to nestegg readers just how easily hackers can drain the life savings of retirees online.
About the author
Join the nestegg community
We Translate Complicated Financial Jargon Into Easy-To-Understand Information For Australians
Your email address will be shared with nestegg and subject to our Privacy Policy
About the author
Join The Nest Egg community
We Translate Complicated Financial Jargon Into Easy-To-Understand Information For Australians
Your email address will be shared with nestegg and subject to our Privacy Policy
Investors seek ETFs during COVID-19 pandemic
Retail investors playing ‘particularly dangerous’ game
Why investors should remain in the market
Coronavirus a ‘collective wake-up call’ for ESG investors
US businesses to survive 3 months due to health pandemic
Sovereign wealth fund declines in March quarter
most viewed
Scams
Puppy love sees Aussies scammed almost $300k
Expenses
The quicker and cheaper way to finalise a divorce
Economy
‘Reporting error’ sees $60bn slashed from JobKeeper
Shares
CommSec urges investor caution
Listen to
What the heck is with robots and tech - ETFs explained
More podcasts
Find super’s sweet spot
Why we’ll keep delivering for our communities in the face of COVID-19
As Australia tries to keep pace with a rapidly changing business and social landscape in the wake of COVID-19, Momentum Media is leading the way delivering essential content to our communities, writes Alex Whitlock, director of Nest Egg.
Website Notifications
Get notifications in real-time for staying up to date with content that matters to you.