Mailbox Security Tips
Protect your email account from hackers, phishing, and fraud. A compromised mailbox can lead to financial loss and stay undetected for a long time — here's how to stay safe.
A Typical Attack Scenario
How hackers exploit a compromised mailbox
You've heard of phishing — but what is whaling? A whaling attack is a targeted attempt to steal sensitive information from a company. Compromised mailboxes can stay undetected for a long time, with far more disastrous consequences than simple spam floods.
-
🔓Mailbox cracked via weak password
The attacker gains access using a guessed or leaked password.
-
📨Forwarders or mail filters added
A hidden forwarder is installed to silently copy or divert all incoming mail to an external illegitimate address.
-
🧾Invoice intercepted and modified
An incoming invoice is copied and updated with the hacker's banking details.
-
💸Payment made without suspicion
As the invoice was expected, the payment is made — directly into the attacker's account — without raising any flags.
Passwords should never be saved in plain text on your computer — unprotected passwords can be tracked down by hackers. Instead, use a dedicated password manager to store all your credentials in a central, encrypted space.
🎣 Beware of phishing emails that trick you into entering your mailbox login details on fake websites. Always check the URL before logging in.
Use a minimum of 11 characters, with at least one uppercase letter and one number
Never reuse passwords across multiple services — if one is leaked, hackers will try it everywhere
Password managers like 1Password and LastPass can generate strong passwords that you don't need to memorise
Check if your details have been involved in a known data breach:
ℹ️ If you find your details in a breach, change your passwords immediately. See: How to change your email password
Install antivirus and anti-malware software on your computer and run regular scans to check for vulnerabilities
When using a public Wi-Fi hotspot, make sure it's reputable — avoid online banking or sending sensitive information on unknown networks
Be cautious when using a public or shared computer — always log out fully and never save passwords in the browser
A popular tactic for hackers is to install email forwarders on your account, silently copying everything you receive to an external address — allowing them to intercept invoices, passwords, and sensitive communications.
Log in to your webmail at mail.your-domain.co.za regularly
Go to Settings and check for any forwarders or mail filtering rules you don't recognise
If you find anything suspicious, delete it immediately and change your password
🚨 If you suspect your account has been compromised, contact us immediately.