I'm a one-man company and I'm getting a lot of phishing emails very similar to the emails from companies I use.
Some of these companies and the emails we exchange are very unique. How would these malicious senders 'learn' the type of emails and content I send?
Since the increase in phishing emails I've also noticed I'm receiving very few genuine emails from the businesses I used to deal with and as such business has slowed down.
My website is on a shared hosting. I use Webmail using Roundcube to usually send receive emails. I've also set up an Imap email account to my webmail account on my android phone (samsung) - is there any security I need to implement on that? The Imap security type setting for both incoming and outgoing server is set to SSL (accept all certificates) over port 465?
Could they be sniffing out content? If so, what are the recommended steps to prevent and to secure a compromised website/email?