Case study: Oil Refinery in Pakistan
An oil refinery in Pakistan achieves a 95% reduction in phishing & BEC attempts
Solution overview
- Solution partner
- JBS (www.jbs.live)
- Solution implemented
- Trend Micro’s Email Security Gateway
Overview
As cyber threats targeting the energy sector grow more sophisticated, organizations like oil refineries face increased risk from phishing, ransomware, and Business Email Compromise (BEC) attacks. One of Pakistan’s leading oil refineries recognized the need to strengthen its email security infrastructure and partnered with Jaffer Business Systems (JBS) to implement Trend Micro’s Email Security Gateway. With operations spanning both remote and on-premises environments, the organization required a scalable, intelligent solution that could adapt to evolving threats. Through this implementation, the refinery achieved major improvements in threat prevention, user awareness, and operational resilience positioning itself for long-term security in a high-risk digital landscape.
Challenges
Phishing Attacks & Business Email Compromise(BEC)
Without advanced phishing protection, users were more likely to receive realistic-looking scam emails that could trick them into giving up credentials or authorizing fradulent payments leading to financial losses.
Lack of URL or Attachment Scanning
Malicious links and attachments were not scanned or sandboxed before users opened them which could have resulted in malware and spam pages accessing the data, without warning, leading to infections and data thefts.
Absence of Time-of Click Protection
Users were prone to clicking dangerous links after they had been weaponized as some emails contained links that seemed safe at first but became malicious later.
Key benefits of the solution
- 99%+ Malware Detection: Blocked known and zero-day threats using AI and sandboxing.
- 30% Fewer IT Tickets: Reduced phishing and email-related support requests.
- 95% Drop in BEC Attempts: Minimized risk of fraud and credential theft.
- Email Continuity Ensured: No downtime, even during server disruptions.
- Encrypted Communications: Secured email exchanges with government and global partners.
The solution provided by JBS
Trend Micro Email Security Gateway is a comprehensive solution designed to protect organizations from a wide range of email-based threats, including phishing, ransomware, business email compromise (BEC), and spam. It offers advanced protection for various cloud and on-premises email platforms.
How it solved the challenges
Shield Against Targeted Attacks
Oil and gas companies are frequently targeted by sophisticated spear-phishing campaigns and Business Email Compromise (BEC) attacks, particularly aimed at executives and supply chain personnel. To counter these evolving threats, the organization deployed Trend Micro’s advanced email security gateway. Leveraging AI-powered threat detection and sandboxing technology, the solution proactively identifies and blocks targeted email threats ensuring malicious content is intercepted before it reaches end users, reducing the risk of financial fraud or data breaches.
Seamless Protection Across Hybrid Infrastructure
Operating across both remote locations and on-premises infrastructure, the client required a flexible security solution. Trend Micro’s platform delivered comprehensive protection across hybrid environments securing both cloud-based and on-prem email servers while maintaining consistent policy enforcement and centralized visibility.
User Awareness & Threat Insights
Even a single click on a malicious link can expose an organization to serious threats. Trend Micro’s Email Security Gateway not only blocks such threats but also provides detailed threat intelligence. These insights empower organizations to proactively train employees and enhance awareness around evolving cyber risks reducing the likelihood of future incidents.
Time-of-Click Protection
The solution safeguards users with time-of-click protection by rewriting all URLs in incoming emails and scanning them in real time at the moment they’re clicked. This approach defends against delayed attacks where links may appear safe initially but are weaponized later. When a user engages with a link, Trend Micro dynamically analyzes the destination using AI, real-time threat intelligence, and URL reputation to identify phishing attempts, malicious redirects, and other suspicious activity—ensuring threats are blocked before damage can occur.
Conclusion
With JBS’s expertise and Trend Micro’s intelligent email security, the oil refinery transformed its threat defense capabilities achieving a 95% drop in phishing and BEC attempts, reduced IT support burden, enhanced user awareness, and a stronger, more resilient cybersecurity posture across its hybrid infrastructure.
Why JBS
- A proven track record of successful project deliveries with measurable outcomes
- Expert-level certifications in cybersecurity, guaranteeing deep technical expertise and best-in-class implementation