How an attack can get into your company

Attacks on SMEs are rarely like the movies: they come through an email, a reused password, a supplier or an outdated program. These are the 16 most common threats, sorted by the door they come through.

See the threat map Take the free test

16 threats, 4 ways in

Each card explains how it happens, how to spot it and how to protect yourself. Click one to open it.

Tricking people

They try to get someone on the team to click, pay or hand over information.

Accounts and access

They exploit poorly protected passwords, permissions and devices.

Software and systems

They get in through technical flaws or lock up your computers.

Data and third parties

They expose your information or use your name from the outside.

Things that shouldn't happen in your company

If you notice any of these, don't ignore it: it's almost always easier to fix the sooner it's spotted.

Ask for a review

Free first call, no commitment

01
Emails in "sent" that nobody wrote, or contacts receiving odd messages from your account
02
Sign-in alerts from places or devices you don't recognise
03
Files that won't open or have strange extensions
04
Rushed, secretive requests for payments or account changes
05
Programs or extensions nobody remembers installing
06
Clients asking about emails or invoices you never sent