Threat Secure Packages · 02 of 11
Phishing Protection
Covers phishing, impersonation and business email compromise, the most reported fraud type at MyCERT.
Training · One-off or yearly
PhishAware
Builds the habit in people. HRD Corp claimable where registered.
- Phishing and BEC workshop
- Executive impersonation session for C-suite and PAs
- Invoice change fraud module for finance
- Short e-learning for new joiners
Assessment · One-off project
PhishCheck
Finds the gaps today and ranks the fixes by risk.
- Baseline phishing simulation with click and report rates
- Microsoft 365 or Google Workspace email review
- SPF, DKIM and DMARC check
- Lookalike domain scan
Managed · Monthly retainer
PhishGuard
Puts the cyber and physical controls in place, then watches and responds every month.
- DMARC enforcement, MFA and external sender banner
- Monthly managed phishing simulations
- Triage of reported emails
- Lookalike domain monitoring
- Visitor badge and tailgating rules on site
Risks covered
Phishing, impersonation, spoofing, business email compromise, invoice change fraud
Best for
IT, finance and the CEO office of mid to large companies
Malaysian anchor
Phishing was 68% of fraud cases handled by MyCERT in Q1 2025.
Did you know?
Figures from published surveys and official reports on phishing risk in Malaysia.
Did you know phishing makes up most reported fraud? Phishing accounted for over three quarters of fraud cases in 2024, the Dewan Negara was told.
Business email compromise is already costing Malaysian firms. According to Kaspersky, Malaysia lost more than RM7.5 million to business email compromise between 2023 and the first half of 2025.
Companies get hit every day. Kaspersky counted 64,778 phishing attempts against Malaysian companies over the period, averaging more than 5,300 a month in 2024.