Thanks to SEMKEL's cyberscan, a number of critical elements were brought to light and quickly corrected, thus reinforcing the company's security.

Firstly, recent combinations of e-mail addresses and passwords belonging to several company users were found for sale on dark web marketplaces. This exposure could have enabled an attacker to access sensitive resources via credential stuffing attacks.

Next, two machines were identified as being infected by stealers, malware specialized in recovering passwords. Identification of their IDs and IPs enabled immediate remediation, including removal of the malware and reinforcement of protection measures for the terminals concerned.

In addition, analysis of connection logs revealed the presence of abnormal external connections on certain production machines. Thanks to an in-depth investigation based on IP traces, a clean-up operation was carried out, preventing potential malicious exploitation.

Finally, it was discovered that the DMARC and DNSSEC protocols on one of the company's managed domains were disabled, exposing the organization to an increased risk of spoofing and phishing. The alert sent to the cyber department led to the standardization of DMARC and DNSSEC settings for all the company's domains. This corrective action immediately helped to reduce phishing attempts, the frequency of which was rising sharply.

Thanks to these interventions, the company has strengthened its cyber-resilience, significantly reducing its exposure to threats and improving the governance of its digital security.