Attackers have worked out that the fastest way into a small business isn't the firewall — it's a friendly email. Social engineering campaigns are getting more polished, and Australian small businesses are squarely in the crosshairs.
Beyond the obvious phishing
The old "Nigerian prince" emails are long gone. Today's campaigns research your business first: they know your suppliers, your staff names, and your busy periods.
- Fake enquiries with malicious attachments
- "New client" leads that link to credential-harvesting pages
- Messages that impersonate your accountant or a real supplier
What to watch for
Anything that creates urgency or asks you to log in via a link deserves a second look. Hover over links before clicking, and treat unexpected attachments with suspicion — even from people you know.
The best defence is a team that can spot the trick. A short awareness session pays for itself the first time someone _doesn't_ click. Want help training your team? Contact me or check where you stand with the Risk Check.