Mimecast Advanced BEC

ADVANCED BEC PROTECTION

Protect your business from Business Email Compromise (BEC) scams.

Block advanced business email compromise threats and gain visibility into your most targeted users - all from one integrated AI powered platform.

The Landscape

25%

of motivated attacks are BEC

$50,000

The median loss from BEC scams

60 sec.

The time it takes to fall for a phishing attack

*Stats based on FBI Internet Crime Report 2023 & 2024 Data Breach Investigations Report

The risk?

Small businesses have limited resources to combat high-volume or complex scams.

5 critical layers to

defend against BEC

Discover how a multi-layered AI-powered approach protects against BEC.

Checklist:

Prefiltering

Block known bad emails, let known good emails through to end users

AI-powered

Natural language processing (NLP) and ML capabilities analyze email content, identifying subtle anomalies and suspicious activity.

Integrated detection

Multiple signals and technologies create a comprehensive view of threats, enabling blocking at the point of detection.

Continuous learning

Limit manual intervention with models that continuously learn and improve.

Security Awareness Training

Enable your employees to be more security conscious, and identify and remediate riskier users.

THE PROBLEM

Protecting against business email

compromise requires more than AI

AI is essential for combating BEC; it adapts to evolving threats, but security teams
must integrate AI with proven methods. The challenge? Managing and tuning vast
amounts of data due to high false positives from AI-only solutions.

Evolving threats

evade defenses

Threat actors continuously change their techniques requiring detections that do not rely on signatures or heuristics.

Fragmented multi-

tool solutions

A broader attack surface creates an overwhelming amount of data for security teams to parse.

False positives from

AI-only security

AI-only solutions often generate false positives, requiring constant tuning and human oversight.

THE MIMECAST SOLUTION

Key benefits of Advanced BEC

Sentiment

Automatic classification of whether a message is potentially a form of BEC attack or not consequently requires AI models that are able to not only identify words but understand the intent. The models must understand generic, underlying patterns which humans are not able to comprehend.

Subject Line Detection

BEC attacks are often very subtle and sometimes provide very little to no clue within the body of the email. Mimecast will not only analyze the message body for sentiment, but also the subject line to determine if there are any risky indicators which may trigger a policy.

Policy Performance (CG only)

Not only will we include the ability for you to set policies based on the confidence level of a detection, but you will also have policy modelling functionality to determine which messages may be caught.

Contextual Sender Information

Highlighting the sender is important but being able to leverage our social graphing technology from Cybergraph to be able to provide contextual information on the sender at an individual and organizational level. This provides admins the ability to understand more about who sent the message to understand why it was rejected or held.

Integrated Platform

Mimecast doesn’t solely rely upon NLP text extraction and a threat model to detect a BEC attack.
· Email DNS authentication failures.
· Domain and user similarity checks using a proprietary algorithm.
· IP address, sender and domain reputation.
· Feeds of known bad IOCs, email content and reputational feeds.
· Credential Theft Protection for suspicious calls to action, correlation of brands between images and sender, web page and certificates.
· Multi-stage phishing detection through phishing signatures.
· IOCs extracted from previously classified emails.
· Abnormal patterns of communication using social graphing technology.
· Rules and heuristics developed by Mimecast Threat Researchers.

Advanced BEC Protection:

AI where you need it most

To effectively identify anomalies and suspicious emails, artificial intelligence capabilities are essential for detecting even the subtlest signs of malicious activity. Mimecast’s Advanced BEC protection utilizes AI to analyze communication patterns, writing styles, and contextual clues to block threats beyond malware or phishing links.

By leveraging billions of signals from across our platform, our AI detection continuously adapts to evolving threats using a multi-layered approach that prevents potential financial losses and data breaches.

Mimecast’s connected human risk management platform offers administrators deep visibility into BEC threats, providing actionable insights for informed security policy decisions and targeted mitigation strategies.