Tackling the human element in cybersecurity management: A tale of a phishing attack on a Malaysian fashion company

MFashion is a Malaysian small-medium-sized enterprise in the fashion industry. In 2023, attackers used an email domain similar to a long-term supplier’s to redirect a large payment to a fraudulent account. MFashion faces persistent challenges, such as management’s lack of cybersecurity prioritization, employee complacency, and an underdeveloped cybersecurity culture. The case examines the importance of the human factor in cybersecurity. In this case study, students will take on the role of a cybersecurity consultant to analyze the key issues and propose recommendations to strengthen MFashion’s cybersecurity.