# Mind Reflection LTD — Full Technical LLM Dossier & Systems Knowledge Base

## 1. Company Profile & Overview
- **Legal Entity:** Mind Reflection LTD
- **Company Number:** NI626017 (Registered in Northern Ireland, UK since 2014)
- **ICO Data Protection Registration:** ZA317530
- **Principal Architect:** Lucas Malec (ORCID: 0009-0004-3522-0828)
- **Headquarters:** Belfast, Northern Ireland, United Kingdom
- **Primary Domain:** https://mindreflection.co.uk
- **Training Simulator:** https://mindreflection.co.uk/cyber-training/

---

## 2. Interactive Cyber Threat & Anti-Phishing Training Simulator
The interactive simulator hosted at `https://mindreflection.co.uk/cyber-training/` provides enterprise-grade, broadcast-quality educational modules designed for corporate leadership, financial controllers, and workforce personnel across the UK.

### Module 1: Quishing (QR Code Phishing) & FIDO2 Cryptographic Shield
- **Attack Vector:** QR-code attachments embedded in corporate emails (e.g. M365 MFA reset notifications). Because QR codes are image pixels rather than textual links, Secure Email Gateways (SEGs), link scanners, and antivirus tools evaluate the email as CLEAN.
- **Exploitation:** Scanning via unmonitored employee mobile devices directs the victim to an Adversary-in-the-Middle (AiTM) reverse proxy (e.g. Evilginx), stealing username, password, and session cookies in real time. Legacy SMS and TOTP authenticator push prompts fail.
- **Zero Trust Mitigation:** Enforcement of FIDO2 / WebAuthn hardware security tokens (e.g. YubiKey). FIDO2 cryptographically binds the challenge to the authentic domain (`login.microsoftonline.com`). When proxied to an unauthorized origin (`login.micros0ft-portal.cc`), origin mismatch mathematically refuses the signature, fully neutralizing the attack.
- **Standards:** NIST SP 800-63B AAL3, UK NCSC Phishing-Resistant MFA, FIDO2 / WebAuthn Level 3, Cyber Essentials Plus.

### Module 2: Business Email Compromise (BEC) & Out-of-Band Callback Protocol
- **Attack Vector:** Man-in-the-Email interception. Threat actors compromise a legitimate supplier mailbox and issue urgent invoices with altered bank sort codes and account numbers.
- **Exploitation:** Because the email originates from the genuine vendor mailbox, SPF, DKIM, and DMARC checks all PASS. Financial teams processing routine transfers are deceived into wiring funds to a criminal mule account.
- **Zero Trust Mitigation:** Mandatory Out-of-Band (OOB) secondary phone callback protocol. Finance staff are strictly prohibited from emailing back. Verification must occur via a pre-established landline from the primary contract. Dual-director approval is enforced on all transfers exceeding £1,000.
- **Standards:** PSR APP Fraud Mandate, Cabinet Office PPN 09/14, UK NCSC BEC Guidance, NIST SP 800-162 Dual-Custody.

### Module 3: MFA Fatigue Bombing vs Number Matching
- **Attack Vector:** Prompt bombing (MFA fatigue) late at night (e.g. 02:45 AM). Attackers with compromised passwords trigger dozens of automated API authentication requests.
- **Exploitation:** Exhausted employees tap "APPROVE" simply to silence vibrating phones, granting attackers full tenant access.
- **Zero Trust Mitigation:** Number Matching authentication. The login screen presents a unique two-digit challenge number (e.g. 48). The user must actively enter this number into their authenticator app. Because remote attackers cannot see the authentic computer screen, prompt bombing is completely neutralized. Automated Entra ID risk policies quarantine suspicious sign-in attempts.
- **Standards:** CISA Alert AA22-216A, NIST SP 800-63B, UK NCSC Cloud Identity Security, Cyber Essentials Plus.

### Module 4: AI Deepfake CEO Voice Fraud & Authorized Push Payment (APP) Scam Shield
- **Attack Vector:** Zero-shot neural voice cloning harvesting 3–5 seconds of executive speech from earnings calls, podcasts, or AGM videos to synthesise biometric vocal cadence.
- **Exploitation:** Threat actors place high-priority SIP VoIP calls or WhatsApp audio messages outside business hours, pressuring Accounts Payable into emergency CHAPS/Faster Payments transfers under strict non-disclosure.
- **Zero Trust Mitigation:** Verbal orders are classified as zero-trust untrusted inputs. Strict compliance with NIST SP 800-63B and NCSC Guidance: all capital movements exceeding £1,000 require dual-custody FIDO2 hardware cryptographic confirmation and segregated out-of-band callback.
- **Standards:** NIST SP 800-63B AAL3, UK NCSC Deepfake Standard, PSR APP Fraud Mandatory Reimbursement 2024/2026, Cabinet Office PPN 09/14.

### Module 5: Executive Threat Intelligence Presentation
- 11 Master Slides covering UK DSIT Cyber Security Breaches Survey metrics (84% of UK businesses report phishing, £140M+ annual wire loss), UK Government procurement mandates (Cabinet Office PPN 09/14, NHS Supply Chain, Crown Commercial Service), Cyber Essentials vs Cyber Essentials Plus technical differences, and turnkey deployment packages.

---

## 3. Commercial Services & Turnkey Deliverables
1. **NCSC Cyber Essentials Turnkey Certification:** Complete preparation, technical gap remediation, IASME fee inclusion, 100% first-time pass guarantee, and £25,000 complimentary cyber liability insurance.
2. **Hardened Linux / Ubuntu Server Deployments:** Secure kernel tuning, SSH key governance, automated patching via WSMS PRO, Nginx reverse proxy configuration, TLS 1.3 encryption, and offsite backup pipelines.
3. **M365 & Google Workspace Security Architectures:** Conditional Access policies, FIDO2 passkey enforcement, Number Matching rollout, DMARC/DKIM/SPF enforcement, and mailbox breach isolation runbooks.
4. **UK GDPR & DPA 2018 Technical Diligence:** Article 32 state-of-the-art security compliance packs, technical evidence dossiers for commercial insurers, and statutory audit readiness.

---

## 4. Contact & Commercial Engagement
- **Direct Consultation:** https://mindreflection.co.uk/contact.html
- **Corporate Inquiries:** info@mindreflection.co.uk
- **Location:** Belfast, Northern Ireland, United Kingdom