The session hijack
Sarah logs into Microsoft 365 from an ordinary WiFi connection. The login page looks completely real. It is not, and her password was never the thing that got stolen.
Ninety seconds, if you would rather watch than read.
Ninety seconds, if you would rather watch than read.
This is an animatic, not the finished video. It carries the shot order, the pacing, the on-screen text and the script exactly as they will be produced, so the team can build the real thing from it. Every scene can also be stepped through by hand using the dots, and it reads as a static storyboard if motion is switched off.
A password is a thing you know. A live session is a thing you hold. Multi-factor authentication protects the first and does nothing for the second, which is why somebody has to be watching what the session does next.
This is the attack that most surprises business owners, because every instinct says a stolen password is the problem. It was not. Sarah’s password could have been forty characters long and the outcome would have been identical.
Keep going
A free dark web scan
and thirty minutes.
We scan for your company email addresses, passwords and customer data in the places stolen and leaked data gets traded, then spend thirty minutes walking you through what came back and what it actually means. No pressure, no jargon, no obligation. You keep the report either way.
Worried about what it takes to move?
Changing IT provider is the single biggest reason businesses stay somewhere they have outgrown. We plan the move around your working week, and we help carry the cost of getting across. Ask us how that works when we speak.