A twelve person accounting practice in Melbourne's east came to us after a staff member's mailbox was used to send fake invoices to clients.
What we did
- Revoked sessions and reset credentials for the affected account
- Removed malicious inbox rules and OAuth consents
- Enforced phishing resistant MFA for all staff
- Notified affected clients with a prepared template
Practice Manager
No client funds were lost. The firm now uses our Business plan.
