Cyber Security Centre processes 1,158 suspicious email submissions through autumn threat window

Advance fee fraud climbs, phishing stays top threat, and supplier compromises spread risk

The Cyber Security Centre (CSC) for the Isle of Man has published its latest threat update covering 1 September through 31 October 2025, listing 1,158 suspicious emails submitted for analysis via the Island’s Suspicious Email Reporting Service (SERS).

Malicious links continued to form the largest share of email submissions, and the period was marked by higher detection of advance fee fraud attempts.

More than 960 emails reported during this period contained links or attachments.

Meanwhile, 79 separate cyber concerns were reported to the CSC through direct channels outside of SERS, which fall into categories including account hijacking, business impersonation, purchase scams, fraudulent websites, smishing, vishing, gift-card fraud, romance fraud, ransomware and other malware types.

Email compromise among third-party supplies on the Island forms a core theme throughout. A cluster of construction-sector incidents began after a phishing email was issued from an already-breached supplier account and subsequently propagated to various other local firms.

The CSC states such trust-based compromises can be trickier to identify internally without forensic review.

Organisational guidance in the update emphasises multi-factor authentication, strong password policies, early incident reporting, vendor security vetting, removal of unused account access, vulnerability scanning, network segmentation, use of web firewalls, and verifying sensitive requests through a separate communication channel before financial or system information is given.

The document reinforces zero-trust architecture as a standard principle for mitigating modern cyber risks.

The CSC reiterates that inbound email volumes do not reflect scam messages already blocked by commercial spam-detection services, meaning the number of undelivered or blocked threats does not form part of the total reported.