Questions and Answers

---

A user receives an email from someone they know, but that person's account has been compromised. When you click the link, a hacker gains access to their Microsoft 365.

From there, the hacker:

• Searches their email for payment conversations (invoices or wiring instructions)
• Sends an email from M365 asking customers or vendors to send payment to a different bank account

If not caught, the money is often gone for good.

If a hacker does not find payment conversations, they will send a phishing link to every contact in the user's address book.  

Most of the time, a M365 account is hacked from a link sent by someone known. 

The users gets an email from "John the vendor" and think, "I've done business with him for years, he is a good guy". At that moment, training is out the window. 

The problem is that John himself did not actually send that email. John's has been breached. Your employee or John does not know it. 

MFA is not sufficient since most malicious links trick the user into entering their MFA code, which allows a hacker to get around MFA.  

Settings that stop unusual sign-ins and 24/7 monitoring stops M365 from being compromised.

Get a free security assessment by filling out the contact us form to see how your M365 would do against a threat actor. 

Most hackers use servers inside the US. 

They are aware that companies with security awareness block sign-ins outside of the US. 

Settings that stop unusual sign-ins and 24/7 monitoring stops M365 from being compromised.

Get a free security assessment by filling out the contact us form to see how your M365 would do against a threat actor. 

Yes, we offer a 60-day love it or leave it refund. 

This way you can make an informed decision on if our services our needed by your business. 

We are very confident in our ability to protect your Microsoft 365. 

Because of this, in the off chance your Microsoft 365 is actually compromised (once we turn on our security settings), we will refund you for the past 12 months, and work with you for $1 per month for the next 12 months. 

 No. 

Cybersecurity includes protecting firewalls, servers, laptops, and desktops, which we do not currently provide. 

Lean Cybersecurity monitors and prevents your M365 account from being hacked. 

M365 account takeovers are the biggest cybersecurity problem for most businesses. 

No.

Your IT provider likely handles end-user support, backups, and networking. We don't replace those services. 

We are happy to work alongside your existing IT provider. 

Logan Fabrizius is a full-time IT Engineer based in Texas. 

His experience is primarily in cybersecurity, but he has also worked extensively with servers, end-user systems, and networks. 

He has stopped hundreds of malicious M365 sign-ins and experienced the real-world damage that a M365 compromise account can bring. 

His certifications include: OSCP, Windows Server Hybrid Admin, and CompTIA trifecta.