How to prevent phishing emails? S/mime mail certificate

phishing （Phishing, English with fishing fishing Similar pronunciation , Also known as fishing attack ）, Send fraudulent emails to victims by posing as banks or other well-known institutions , Seduce one's own sensitive recipient （ Such as user name 、 password 、ATM Transaction password or credit card details ）, So as to obtain illegal gains . Phishing is one of the oldest tricks in online fraud , It is reported that , Phishing accounts for... Of total data breaches 90%. When a fraudster finds that a well-designed email can impersonate a trusted entity , To achieve a lot of illegal income , They will do everything .

In this paper , We will discuss the problem of phishing from various angles , And provide the best way to fight phishing ： install S/MIME Mail Security Certificate .

Fishing is everywhere

According to statistics , Now every 20 A new phishing site will appear in seconds , and 86% Your email attack does not contain malware , It's harder to recognize . According to the Google Express , In just one week , They stop... Every day COVID-19 Phishing email exceeded 1800 Ten thousand . and 70% Companies are at risk of an increase in phishing emails . According to the target of attack , Anyone can be a victim .

As you can see , Phishing has evolved into a serious threat that cannot be completely eliminated . As long as the Internet exists , Phishers will find ways to manipulate users and businesses . That's why you should always be vigilant when opening and managing email .

Although it's much harder to pretend to be someone else in real life , But in the online world, it's easy to fake others . From the early ” A Lithuanian man posing as a senior manager of Taiwan's quanta computer company , Phishing email scams Google and Facebook more than... In two years 1.2 Billion dollars “; Last year 8 month , The attacker pretended to be Pfizer, a famous pharmaceutical company, in the phishing email to carry out highly targeted phishing activities , To steal the victim's business and financial information … We can see , Compared to fictional entities , Phishing attackers are better at posing as well-known companies , Victims see well-known brands , It will be easier to relax your vigilance .

How to identify phishing emails

1. Strange tone or strange greeting
If you suddenly find that the writing style of your long-term business partner has changed , The alarm should be sounded immediately . If after saying hello , What follows is a call to action , You have reason to doubt the other person's true identity .

2. Suspicious email addresses and fake Links
You should check the sender's authenticity URL And links in emails . This is usually the quickest way to determine whether an email account is true or false . Don't click on the link , Instead, hover over them , And pay attention to any suspicious words or domain name extensions . If the email is allegedly from Paypal.com, But the link is not Paypal.com, Please mark email as spam and delete it .

3. Grammar mistakes
Most legitimate businesses proofread email carefully before sending it . If there are more spelling and grammatical errors in the email , You need attention , This may also be phishing mail .

4. Ask for vouchers and payment information
A seemingly official email asks you to visit a fake login page and submit your personal data, and even ask for payment to solve the problem in the email . To avoid this complex scam , Please enter URL Instead of clicking on the link to visit the site mentioned in the email .

5. There is no digital signature
A digital signature will verify the sender's true identity . And SSL Certificates are similar to , The mail security certificate supports end-to-end encryption of mail communication . You can check the status of incoming email on the client , Click the red medal icon on the right side of the email , The green check mark displayed indicates that the message has been digitally signed by a trusted certification authority . If a red warning appears , It indicates that the mail may have been tampered with or the certificate has expired . If you can't find the icon , We also need to be vigilant about the authenticity of the sender's identity .

Prevent phishing emails , What can you do

To protect your personal or corporate identity from being used by phishers , The best way is to use S/MIME E-mail security certificate digitally signs your e-mail .S/MIME The certificate will encryption All your outgoing emails and documents , and verification As the sender's true identity .

stay Ruicheng information , You can find perfect S/MIME service , More convenient to protect your email security .