Phishing | Hector Herrera

Designing an email protection capability against phishing, fraud, and critical-process compromise

Structuring an email protection capability focused on detecting phishing, fraud, impersonation, and other interactions capable of compromising critical business processes.

Email is not just a channel: it is an attack surface against critical business processes

A convincing email can alter a decision, capture credentials, or redirect a critical process without looking like a traditional attack.

The most dangerous email attacks do not always carry malware

Better detection is not simply more filtering: it is the ability to recognize when a message or interaction is trying to lead a user toward a dangerous decision.