--- title: Why Are IT Outsourcing Companies Vulnerable to Business Email Compromise? description: Discover how IT outsourcing companies can guard against Business Email Compromise, ensuring the security of their operations and client relationships. image: https://netnam.com/hubfs/undefined-Oct-22-2026-03-58-28-1235-AM.png --- [![NetNam](https://netnam.com/hubfs/netnam_website_image/00_netnam_logo/mjx-nn-logo-white.png)](https://netnam.com?hsLang=en)[![NetGuardX](https://netnam.com/hubfs/Services%20Mini%20Site/NetGuardX/assets/logo_netguardx_white.png)](https://netnam.com/netguardx?hsLang=en) [Giới thiệu NetGuardX](https://netnam.com/netguardx?hsLang=en) [**SOC-as-a-Service**Trung tâm điều hành an ninh đạt chuẩn quốc tế](https://netnam.com/netguardx#soc-service)[**Năng lực NetGuardX**Công nghệ, con người và quy trình](https://netnam.com/netguardx#nang-luc) [**Bài viết nổi bật**Góc nhìn và phân tích chuyên sâu](https://netnam.com/netguardx#bai-viet) [Dịch vụ](https://netnam.com/netguardx/services?hsLang=en) [**Giám sát và vận hành An toàn Thông tin 24/7**Giám sát, vận hành và ứng cứu an toàn thông tin 24/7](https://netnam.com/netguardx/services#svc-monitor)[**Đánh giá An toàn Thông tin**Đánh giá mức độ bảo vệ và rủi ro của hệ thống](https://netnam.com/netguardx/services#svc-pentest) [**Tư vấn tuân thủ An toàn Thông tin**Tư vấn tuân thủ và chuẩn hóa an toàn thông tin](https://netnam.com/netguardx/services#svc-audit)[**Đào tạo nhận thức An toàn Thông tin**Đào tạo kỹ thuật và nâng cao nhận thức bảo mật](https://netnam.com/netguardx/services#svc-managed) [Tài nguyên](https://netnam.com/netguardx/resources?hsLang=en) [**Thư viện**Bài viết & phân tích chuyên sâu](https://netnam.com/netguardx/resources?hsLang=en)[**Case study**Câu chuyện khách hàng thực tế](https://netnam.com/netguardx/resources#cases) [Tin tức & Sự kiện](https://netnam.com/netguardx/news-and-events?hsLang=en) [Liên hệ](https://netnam.com/netguardx/contact-us?hsLang=en) ![Tiếng Việt](https://netnam.com/hubfs/IMPORTANT%20-%20Website%20Image%20Source/mjx-nn-nav_language-vietnamese-icon.svg) EnglishTiếng Việt English - [Tiếng Việt](https://netnam.com/thu-vien/v%C3%AC-sao-doanh-nghi%E1%BB%87p-ito-d%E1%BB%85-tr%E1%BB%9F-th%C3%A0nh-m%E1%BB%A5c-ti%C3%AAu-c%E1%BB%A7a-c%C3%A1c-cu%E1%BB%99c-t%E1%BA%A5n-c%C3%B4ng-gi%E1%BA%A3-m%E1%BA%A1o-email) - [English](https://netnam.com/en/resources/v%C3%AC-sao-doanh-nghi%E1%BB%87p-ito-d%E1%BB%85-tr%E1%BB%9F-th%C3%A0nh-m%E1%BB%A5c-ti%C3%AAu-c%E1%BB%A7a-c%C3%A1c-cu%E1%BB%99c-t%E1%BA%A5n-c%C3%B4ng-gi%E1%BA%A3-m%E1%BA%A1o-email) ![](https://netnam.com/hubfs/undefined-Oct-22-2026-03-58-28-1235-AM.png) [Tài nguyên](https://netnam.com/netguardx/tai-nguyen?hsLang=en) / Network Reliability # Why Are IT Outsourcing Companies Vulnerable to Business Email Compromise? Bởi Marketing NetNam [mailto:?subject=%3Cspan+id%3D%22hs_cos_wrapper_name%22+class%3D%22hs_cos_wrapper+hs_cos_wrapper_meta_field+hs_cos_wrapper_type_text%22+style%3D%22%22+data-hs-cos-general-type%3D%22meta_field%22+data-hs-cos-type%3D%22text%22+%3EWhy+Are+IT+Outsourcing+Companies+Vulnerable+to+Business+Email+Compromise%3F%3C%2Fspan%3E&body=https://netnam.com/en/resources/vì-sao-doanh-nghiệp-ito-dễ-trở-thành-mục-tiêu-của-các-cuộc-tấn-công-giả-mạo-email](mailto:?subject=%3Cspan+id%3D%22hs_cos_wrapper_name%22+class%3D%22hs_cos_wrapper+hs_cos_wrapper_meta_field+hs_cos_wrapper_type_text%22+style%3D%22%22+data-hs-cos-general-type%3D%22meta_field%22+data-hs-cos-type%3D%22text%22+%3EWhy+Are+IT+Outsourcing+Companies+Vulnerable+to+Business+Email+Compromise%3F%3C%2Fspan%3E&body=https://netnam.com/en/resources/vì-sao-doanh-nghiệp-ito-dễ-trở-thành-mục-tiêu-của-các-cuộc-tấn-công-giả-mạo-email) IT outsourcing (ITO) providers often act as a connecting point between multiple parties involved in service delivery, from internal operations teams and customers to vendors and technology partners. In this position, an ITO provider becomes an important part of the IT service chain, trusted by customers to operate systems, provide support, and resolve technical issues. That level of trust can also be exploited. If an ITO provider’s identity or communication channel is impersonated, an unusual request may appear more legitimate than it otherwise would. The impact can extend beyond the provider itself to financial transactions, operational coordination and relationships with customers and partners. In September 2026, Microsoft reported a business email fraud campaign in which more than one million emails were sent within just three days. Attackers impersonated company executives, used fraudulent invoices carrying the ServiceNow brand, and created email threads designed to persuade payment teams to transfer nearly USD 50,000. IT services and business consulting companies were among the sectors targeted. Importantly, Microsoft found no evidence that ServiceNow’s systems had been compromised. Instead, the attackers exploited the company’s name, brand and lookalike domains to make emails; invoices and communication threads appear to be part of a legitimate business transaction. ## Email Fraud Risks Can Emerge from Routine Business Communications Business Email Compromise (BEC) is a form of email fraud in which attackers impersonate a trusted individual or organization to persuade the recipient to take an action such as transferring money, changing payment details or disclosing sensitive information. A BEC attack does not necessarily begin with the compromise of a legitimate email account. Attackers may use lookalike email addresses or domains, or spoof the display name of an executive, customer or supplier to create a sense of familiarity. In other cases, a legitimate email account may be compromised and then used within an existing conversation thread. When this happens, fraudulent requests can be considerably more difficult to recognize. Microsoft reported that, in the second quarter of 2026, 87–92% of initial contact emails in BEC incidents consisted only of simple opening exchanges, with no immediate reference to financial transactions or specific documents. This suggests that attackers often avoid making sensitive requests at the beginning. Instead, they gradually establish a sense of normality and trust before guiding the recipient toward the action they ultimately want them to take. ## When Trust in the IT Service Chain Is Exploited For ITO providers, BEC risk needs to be considered within the context of the trusted relationships among the different parties involved in service delivery. When a fraudulent request is introduced into what appears to be a familiar business conversation, the impact of BEC can extend beyond a financial transaction to affect operations, internal resources and relationships with customers and partners.  ![](https://netnam.com/hs-fs/hubfs/undefined-Oct-22-2026-03-58-28-1235-AM.png?width=619&height=348&name=undefined-Oct-22-2026-03-58-28-1235-AM.png) To reduce BEC risk, ITO providers need to maintain two complementary layers of control. The first is an operational control layer, which helps reduce risks arising from business processes and operational decisions. The second is a cybersecurity layer, which helps the organization maintain visibility and the ability to verify and respond to abnormal activity.  ![](https://netnam.com/hs-fs/hubfs/undefined-Oct-22-2026-03-58-28-7266-AM.png?width=616&height=346&name=undefined-Oct-22-2026-03-58-28-7266-AM.png) ## Maintaining Cybersecurity Capabilities That Fit ITO Operations For ITO providers, the challenge is not simply detecting a suspicious email. It is also about maintaining cybersecurity capabilities that are appropriate for the scale of operations and the resources available. Internal teams still need to prioritize day-to-day customer support and service delivery. In that context, building every specialized cybersecurity capability in-house from the outset may not always be necessary. NetGuardX is developed under a Managed Security Services (MSSP) model, with a service ecosystem designed around the actual needs and development journey of each organization. Rather than applying a fixed model, NetGuardX helps ITO providers strengthen cybersecurity capabilities according to their level of risk, operational scale, and customer requirements. It also helps organizations make better use of existing security investments, add specialist resources where they are needed, and maintain the ability to respond when incidents occur.   This allows ITO providers to strengthen their cybersecurity capabilities without placing excessive additional pressure on internal teams, while maintaining the level of trust required to deliver services to customers. [**Learn more about NetGuardX services!**](https://netnam.com/netguardx/contact-us?hsLang=vi) Hotline: 1900 1586 Email: [marketing@netnam.vn](mailto:marketing@netnam.vn) Website: [https://netnam.com/netguardx](https://netnam.com/netguardx?hsLang=vi) **NETNAM CORPORATION - 30 years of trusted internet and managed IT solutions and services for businesses** **Head Office**: 2nd Floor, HITC Building, 239 Xuan Thuy Street, Cau Giay Ward, Hanoi **Branch Office:** 7 Nguyen Thi Minh Khai Street, Sai Gon Ward, Ho Chi Minh City **Representative Office:** 2 Quang Trung Street, Hai Chau Ward, Da Nang ![](https://netnam.com/hubfs/Services%20Mini%20Site/NetGuardX/assets/home_hero_bg_data_flow.jpg) Doanh nghiệp của bạn mất bao lâu để phát hiện một cuộc tấn công? NetGuardX đánh giá hiện trạng và bàn giao đề xuất lộ trình giám sát trong 5 ngày làm việc. [Đặt lịch đánh giá](https://netnam.com/netguardx/lien-he?hsLang=en) Nội dung bài viết Nhận bản tin hằng tháng Xu hướng tấn công mạng, tuân thủ NIST/ISO và kinh nghiệm vận hành SOC — gửi tới hộp thư của bạn. Đăng ký Giải pháp cho ngành [Khách sạn **Bảo vệ dữ liệu khách & hệ thống đặt phòng 24/7**](https://netnam.com/netguardx/dich-vu?hsLang=en) [**Logistics**Giám sát chuỗi cung ứng & hệ thống điều vận](https://netnam.com/netguardx/dich-vu?hsLang=en) [**Bán lẻ**Tuân thủ PCI-DSS & bảo vệ dữ liệu thanh toán](https://netnam.com/netguardx/dich-vu?hsLang=en) Tải tài liệu **An ninh mạng 2026: bản đồ mối đe dọa & lộ trình phòng thủ cho doanh nghiệp Việt Nam** [Tải xuống](https://netnam.com/netguardx/tai-lieu?hsLang=en) ## Bài viết liên quan ### [Compliance Corner 4 phút Cybersecurity Risks Retailers May Face During Peak Sales Season Đọc thêm](https://netnam.com/en/resources/doanh-nghi%E1%BB%87p-b%C3%A1n-l%E1%BA%BB-%C4%91%E1%BB%91i-m%E1%BA%B7t-v%E1%BB%9Bi-nh%E1%BB%AFng-r%E1%BB%A7i-ro-an-ninh-m%E1%BA%A1ng-n%C3%A0o-trong-m%C3%B9a-b%C3%A1n-h%C3%A0ng-cao-%C4%91i%E1%BB%83m?hsLang=en) ### [Optimize with NetNam 5 phút Agentic AI Governance in Retail: Trends and Challenges Đọc thêm](https://netnam.com/en/resources/qu%E1%BA%A3n-tr%E1%BB%8B-agentic-ai-trong-ng%C3%A0nh-b%C3%A1n-l%E1%BA%BB-xu-h%C6%B0%E1%BB%9Bng-v%C3%A0-th%C3%A1ch-th%E1%BB%A9c?hsLang=en) ### [NetGuardX 4 phút Securing Remote Access in IT Outsourcing Operations Đọc thêm](https://netnam.com/en/resources/qu%E1%BA%A3n-tr%E1%BB%8B-quy%E1%BB%81n-truy-c%E1%BA%ADp-t%E1%BB%AB-xa-trong-m%C3%B4i-tr%C6%B0%E1%BB%9Dng-d%E1%BB%8Bch-v%E1%BB%A5-ito?hsLang=en) [![NetNam](https://netnam.com/hubfs/netnam_website_image/00_netnam_logo/mjx-nn-logo-white.png)](https://netnam.com?hsLang=en)[![NetGuardX](https://netnam.com/hubfs/Services%20Mini%20Site/NetGuardX/assets/logo_netguardx_white.png)](https://netnam.com/netguardx?hsLang=en) SOC-as-a-Service đạt chuẩn quốc tế — vận hành bởi NetNam, Your Net We Care. Dịch vụ [Giám sát và vận hành An toàn Thông tin 24/7](https://netnam.com/netguardx/services#svc-monitor) [Đánh giá An toàn Thông tin](https://netnam.com/netguardx/services#svc-pentest) [Tư vấn tuân thủ An toàn Thông tin](https://netnam.com/netguardx/services#svc-audit) [Đào tạo nhận thức An toàn Thông tin](https://netnam.com/netguardx/services#svc-managed) Tài nguyên [Thư viện](https://netnam.com/netguardx/resources?hsLang=en) [Case study](https://netnam.com/netguardx/resources#cases) Tin tức & Sự kiện [Tin tức](https://netnam.com/netguardx/news-and-events?hsLang=en) [Sự kiện](https://netnam.com/netguardx/news-and-events?hsLang=en) **Trụ sở chính:** Tầng 2, Tòa nhà HITC, 239 Xuân Thủy, Phường Cầu Giấy, Thành phố Hà Nội - [Hotline: 1900 1586](tel:19001586) - [Email: netguardx@netnam.vn](mailto:netguardx@netnam.vn) **Chi nhánh Hồ Chí Minh:** 7 Nguyễn Thị Minh Khai, Phường Sài Gòn, Thành phố Hồ Chí Minh **Trung tâm kinh doanh miền Trung:** 2 Quang Trung, Phường Hải Châu, Thành phố Đà Nẵng © 2026 NetNam Corporation · NetGuardXChính sách bảo mật · Điều khoản ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Marketing NetNam", "url" : "https://netnam.com/en/resources/author/marketing-netnam" }, "dateModified" : "2026-10-22T04:00:22.683Z", "datePublished" : "2026-10-22T03:59:18.000Z", "headline" : "Why Are IT Outsourcing Companies Vulnerable to Business Email Compromise?", "image" : [ "https://netnam.com/hubfs/undefined-Oct-22-2026-03-58-28-1235-AM.png" ], "mainEntityOfPage" : { "@id" : "https://netnam.com/en/resources/vì-sao-doanh-nghiệp-ito-dễ-trở-thành-mục-tiêu-của-các-cuộc-tấn-công-giả-mạo-email", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://netnam.com/hubfs/Logo.png" }, "name" : "Standard" } } ```