The compromised vendor
A real invoice, from a real supplier, sent from their real email account. With new banking details. Here is why nothing about it looks fake, and what actually catches it.
Ninety seconds, if you would rather watch than read.
Ninety seconds, if you would rather watch than read.
This is an animatic, not the finished video. It carries the shot order, the pacing, the on-screen text and the script exactly as they will be produced, so the team can build the real thing from it. Every scene can also be stepped through by hand using the dots, and it reads as a static storyboard if motion is switched off.
Verification of any change to banking details, by telephone, on a number you already had, is not bureaucracy. It is the only control that would have caught this one.
Everything else in this story was working correctly. The filter was right, the sender really was genuine, and the email really was sent from his account. The gap was not in the technology. It was the absence of one rule, applied every time, without exception.
Keep going
A free dark web scan
and thirty minutes.
We scan for your company email addresses, passwords and customer data in the places stolen and leaked data gets traded, then spend thirty minutes walking you through what came back and what it actually means. No pressure, no jargon, no obligation. You keep the report either way.
Worried about what it takes to move?
Changing IT provider is the single biggest reason businesses stay somewhere they have outgrown. We plan the move around your working week, and we help carry the cost of getting across. Ask us how that works when we speak.