During the period from January 1 to September 3, 2015, we collected some mail samples from global spam and extracted their metadata. Then we studied the words in the subject domain of the mail, or the "hooks" used by social workers.
By tagging the social worker mail topics we collected, we revealed the social work topics of TOP3 used for cybercrime: online shopping, money and documents.
Below we introduce some best practices that you can use to circumvent the security risks of “fishing”:
1. If you don't know that something will happen, such as a single express delivery, bank transfer, or a file, then someone will send you a similar content sent to your mailbox, you will not open it, correspondingly, you will Will not "in the middle of the move." In short, use common sense to judge a message or message from an unknown recipient.
2. If you are waiting for an email and happen to receive an email with similar content, but you are not sure if the email is safe (for example, you are an employee of your HR department and are currently recruiting And received a job search email with a resume), check out the following suggestions that may help you:
a. Upload to the file scanning website. For example: http://fortiguard.com/virusscanner
b. Look carefully at the sender.
c. Pay attention to the content of the email.
3. Create a mail rule
Another way to help you avoid social worker emails is to create email rules to filter out potentially malicious emails. For example, you can filter out messages from non-company mailbox systems by rules, and add some keywords such as payment, courier, credit card, file, etc., which are commonly used by social workers, to the rule, and create one or more separately. Folders to place these messages.
|