IT Security Awareness Tips - Email Hack

今天我们一位重要客户，收到了一封黑客冒用上级领导名字发出的邮件。

One of our VIP Customers received an email sent by hackers using his manager's name as the sender to steal personal information.

由于平日的安全培训很到位，我们的用户拥有高度的安全意识，黑客没有获取任何个人信息或公司机密文件。

Fortunately, there is no leakage of any information or confidential files due to end user’s high level of Security Awareness.

因此请注意，切勿在未确认发件人身份的邮件地址上，回复或透露个人信息。

Therefore, please be aware of email security. DO NOT reply this mail or give out any personal information before the confirmation of the sender’s identity.

---

明天就是国庆节了，Sinokap希望您在享受假日的同时，也要注意自己各类社交软件上的信息安全。

Since the National Day is coming, we hope that you can enjoy the holiday meanwhile keep your information secure on apps.

以下我们模拟了几种黑客在节假日的惯用欺骗手段。

Here are several common deception methods used by hackers during holidays.

场景1， 假装人在国外，无法访问公司邮箱，从而索取报价等机密文件

Dear XXX, I am out of China with No Phone and cannot access company email. There is VIP Customer waiting for the quotation or confidential files. Pls. send me immediately. Thank you.

场景2， 假装人在旅游途中遭遇偷盗，从而索取钱财或银行账号

Dear XXX, I am in travel and No Phone No Money, pls. send me transfer some money for XXX and I will appreciate your kindness in this urgent case and back to you after holiday. Thank you.

场景3， 假装人在旅游途中，无法访问公司邮箱，从而索取邮箱账号密码

Dear XXX, I am in travel and I need my company email password immediately, I need reply the VIP email NOW!!! Thank you.

我们处理这些事情的应对方法是：

Our suggestions are as follows,

A. 在确认身份前，千万不要给出他邮件中要求的内容！

DO NOT give out ANY information that is required in the mail before confirming the identity.

B. 直接拨打对方的手机，确认事件的真实性。

Directly contact the person to confirm the authenticity of the incident.

C. 让对方拨打你的手机，如果他用各种理由搪塞，不需要理他。

Directly ask the sender to contact you. We can assume you and the sender are in a business relationship, the sender should have your contact, in addition to email. If the sender makes excuses to refuse directly call you, you may ignore it.

一旦发现该邮件，请立即联系Sinokap IT，我们会第一时间阻止该邮件避免任何信息损失。

Once you find out this email is fake, please immediately inform Sinokap IT and we will block it at the first time in case any information lost.

如果您在假期中遇到此类问题，请联系consulting@sinokap.com。

If you’re having problems , please contact consulting@sinokap.com.

请重视此类钓鱼邮件对您的重要资料所带来的威胁。Sinokap IT一直保障您的IT安全。

Please pay attention to the damage caused by phishing email.

Sinokap IT always supports you and your workplace with a Secured IT Environment.

---

Sinokap IT 安全意识培训

Related IT Security Awareness Training:

Sinokap Website: https://it-support-china.com/it-blogs/

Sinokap WeChat Article：https://mp.weixin.qq.com/s/uUDfClJNKPYZoRf8W87ODA