'Most top firms in M'sia leave customers, staff exposed to cyberattacks'

The majority of top firms in Malaysia are leaving their customers, staff, and stakeholders exposed to email fraud and email-based attacks, according to United States-based cybersecurity and compliance company, Proofpoint Inc.

In its analysis, the company found only 11 percent of Malaysian companies featured in the Fortune Southeast Asia 500 have implemented the recommended and most stringent level of email authentication.

This authentication prevents cyber criminals from spoofing organisations’ identities, thus reducing the risk of email fraud, said Proofpoint in a statement today.

Proofpoint head of systems engineering, Southeast Asia and South Korea, Philip Sow said email continues to be the number one vector for cybercriminals.

“As we approach the year-end shopping and holiday planning season, top Southeast Asian companies are leaving their customers vulnerable to email fraud and email-based attacks,” he said.

Sow added that the lack of protection against phishing in Southeast Asia is particularly alarming and lags well behind other regions.

Therefore, it is essential for reputable brands to implement the most widely accepted email authentication protocol, called Domain-based Message Authentication, Reporting and Conformance (Dmarc), to defend against domain impersonation and ensure spoofing emails do not reach their targets, he highlighted.

Dmarc protects domain names from being misused by malicious actors, by authenticating the sender’s identity before allowing an email to reach its intended destination.

This authentication system detects and prevents domain spoofing, which is an email phishing technique used for business email compromise and other email-based attacks.

Proofpoint’s research also showed that of all the organisations in Malaysia that have some form of Dmarc policy in place, 68 percent opted to implement Dmarc on their own without expert assistance, risking security gaps.

It noted that while 83 percent of Malaysian companies on the Fortune Southeast Asia 500 list have some form of Dmarc adoption in place, only 11 percent have a Dmarc policy of “reject” in place, the strictest recommended level which blocks unqualified emails from getting to the recipient.

It noted Singapore (28 percent) has the highest adoption rate for the strictest recommended level of email authentication, while the Philippines are at 11 percent, Thailand (10 percent), and Indonesia (10 percent).

- Bernama

Prasarana confirms ransomware attack

Most M'sian software supply chains exposed to cyberattacks - survey

Over 79pct of M'sian software supply chains vulnerable: Blackberry

Experts say social media licensing requirements timely

AirAsia should be compensated for IT outage, says Tony Fernandes

'Global IT outage costs airlines millions, industry needs answers'